3 ms·
We‘ve been writing a tool to check lock files against the registry: https://www.npmjs.com/package/@gitlab/untamper-my-lockfile https://www.npmjs.com/package/@gi
by leipert 3y ago
We‘ve been writing a tool to check lock files against the registry: https://www.npmjs.com/package/@gitlab/untamper-my-lockfile https://www.npmjs.com/package/@gitlab/untamper-my-lockfile
For now it only supports yarn, but npm support shouldn’t be too hard.
- louislang 3y agoThis is really cool work, glad to see someone tackling this! Can I assume this will get rolled out into gitlab natively?
- leipert 3y agoActually good point, will talk to the respective PMs next week. Mainly been using it in CI in order to protect our own projects (thus yarn only for now)