Unvalidated npm trusted publishing configurations now expire

T1Covered by 1 source · first reported by GitHub — Blog / Changelog at 02 Oct, 19:07 UTC

Unvalidated npm trusted publishing configurations now expire 48 hours after creation and can no longer authorize publishing. This limits the risk of trusting a repository or project name that changes… The post Unvalidated npm trusted publishing configurations now expire appeared first on The GitHub…

dev

Sources

• T1Unvalidated npm trusted publishing configurations now expireGitHub — Blog / Changelog02 Oct, 19:07