expressjs / expressjs/security-wg
Universal Action to rotate NPM keys
Open
- Dominant language
- No language data
- Stars
- 17
- Forks
- 12
- Avg merge
- 1m
- Merged PRs (30d)
- 1
Description
Hi folks,
I'm opening this issue just to get more attention from the express side. I opened https://github.com/fastify/fastify/issues/5984 to discuss a feasible approach to rotate npm keys across many repositories of an organization, and I believe the same problem we are facing on `fastify` would happen here.
@UlisesGascon has mentioned you all would be working on something similar soon, so I thought I could help and we could create something more universal. Where can I get more info about this initiative?
Contributor guide
Assessment
This issue has not been assessed yet.