developmentseed / developmentseed/stac-react
Move to NPM trusted publishing
Open
- Dominant language
- TypeScript
- Stars
- 34
- Forks
- 4
- PR merge metrics
- No merged PRs in 30d
Description
As supply chain attacks get worse, we want to move our packages to be published **only** by trusted publishing.
This package is currently allowed to publish by token.
See https://github.com/developmentseed/how/issues/475 and see https://github.com/developmentseed/deck.gl-raster/blob/main/.github/workflows/release.yml for an example of trusted publishing. Also ref https://github.com/developmentseed/deck.gl-healpix/issues/6
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.