Brievox

Unvalidated npm trusted publishing configurations now expire

GitHub changes npm trusted publishing so unvalidated configurations expire 48 hours after creation and can no longer authorize publishing. The change reduces the risk of trusting a repository or project name that later changes.

1 source Published Updated

Image: GitHub Changelog

Coverage 1 publisher

  1. GitHub Changelog

    Unvalidated npm trusted publishing configurations now expire

Articles stay on their publishers’ sites; each link opens the original.