3 ms·
It looks like it's for accounts that contribute code. Compromised accounts can sneak malicious stuff into dependencies.
by yakkityyak 4y ago
It looks like it's for accounts that contribute code. Compromised accounts can sneak malicious stuff into dependencies.
- 0xffff2 4y agoMaybe I don't understand what "contribute code" means... Do I only "contribute code" if I open a PR on a repo I don't own? Seems like a good option to allow people to enable, but forcing it is an unnecessary overreach.
- yakkityyak 4y agoI interpret it as: your account publishes code bits in any capacity, as opposed to a read-only account that only pulls and participates in social discussions.