3 ms·
Great work! This provenance check is going to be very valuable for enforcing supply-chain security. We are working on adding support to check for provenance in
by ashishbijlani 4y ago
Great work! This provenance check is going to be very valuable for enforcing supply-chain security. We are working on adding support to check for provenance in Packj.
1. https://github.com/ossillate-inc/packj https://github.com/ossillate-inc/packj flags risky/malicious NPM/PyPI/Ruby dependencies