bazel-contrib / bazel-contrib/multitool

Add a minimum-age requirement to the `update` command

Open
#142 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
6
Forks
2
PR merge metrics
No merged PRs in 30d

Description

Similar to [minimumReleaseAge](https://pnpm.io/settings#minimumreleaseage) in pnpm, it might be good to have a similar flag in multitool, so that, when a release has just been posted, it won't get added immediately, but only after it's been out for a few days, during which time hopefully someone will notice if it has some kind of serious vulnerability, or was pushed by a malicious actor who got control of the author's account. What do you think?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.