> One solution would be GitHub support for building & publishing packages Except you can build packages using one of a million different tools. Unless you cou

> One solution would be GitHub support for building & publishing packages Except you can build packages using one of a million different tools. Unless you could only publish packages that were built using specific vetted tools (and vetted plugins for those tools), that wouldn't change anything. If I can change anything in the build pipeline, I can control the output.