3 ms·

This has nothing to do with trusting packages; it’s about delegating publishing authority to a service like GitHub Actions.

• verdverm 4y ago
  How do you know that what the action is doing is trustworthy?