npm provenance public beta - GitHub Changelog
npm packages built on a cloud CI/CD system (like GitHub Actions) can now publish with provenance, meaning the package has verifiable links back to its source code and build instructions.…
Discussion around the web
- Hacker News67 · 28 💬
Score breakdown
- Technical depth45
- Practical value45
- Originality60
- Writing quality82
- Source reputation85
- Recency0
- External engagement27
- On-site engagement0
More like this
The GitHub Blog50
Staged publishing and new install-time controls for npm - GitHub Changelog
Person·unknown·4 min read
The GitHub Blog54
npm is joining GitHub
Nat Friedman·unknown·9 min read
The GitHub Blog40
SSH commit verification now supported - GitHub Changelog
Person·unknown·2 min read
The GitHub Blog41
Updated rate limits for unauthenticated requests - GitHub Changelog
Person·unknown·2 min read
Engradar shows a summary and links to the original article. The full article is hosted on github.blog.