3 ms·
On the contrary, I'd vasty prefer if a package repository required the source be hosted within the same account (even if just a mirror) that is offering the pac
by ocdtrekkie 7y ago
On the contrary, I'd vasty prefer if a package repository required the source be hosted within the same account (even if just a mirror) that is offering the package, so that they can verify the authenticity/reproducibility of anything inside.
- snazz 7y agoIsn't that kind of the point of the GitHub Package Registry?
- ocdtrekkie 7y agoPresumably a good reason to push NPM over to it.