CIRCLE WITH A DOT

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

dear package registries (npm, composer, etc), i am begging you

Uncategorized

1 Posts 1 Posters 8 Views

N This user is from outside of this forum
N This user is from outside of this forum
nunomaduro@mastodon.social

wrote last edited by

#1

dear package registries (npm, composer, etc), i am begging you
require 2FA before someone can tag a release RIGHT NOW
this would immediately stop a huge amount of the open source supply chain attacks we keep seeing
1 Reply Last reply
3
0
D dansup@mastodon.social shared this topic

R relay@relay.mycrowd.ca shared this topic

R relay@relay.an.exchange shared this topic