4 ms·

But how would you know that the sourced on NPM same as the ones you have? Except if you require all NPM packages to be hosted on Github but that does not seem l

by mijamo 8y ago

But how would you know that the sourced on NPM same as the ones you have? Except if you require all NPM packages to be hosted on Github but that does not seem like a good idea to me.

consumer451 8y ago
Couldn't some simple standard be developed to allow non-github repo hosts to also be used?
- proneb1rd 8y ago
  Like gpg the payload and make sure npm has a public key.