expressjs / expressjs/security-wg

Universal Action to rotate NPM keys

Open
#46 16 comments 1 reaction 1 assignee Claimed by @sheplu View on GitHub
Dominant language
No language data
Stars
17
Forks
12
Avg merge
1m
Merged PRs (30d)
1

Description

Hi folks,

I'm opening this issue just to get more attention from the express side. I opened https://github.com/fastify/fastify/issues/5984 to discuss a feasible approach to rotate npm keys across many repositories of an organization, and I believe the same problem we are facing on `fastify` would happen here.

@UlisesGascon has mentioned you all would be working on something similar soon, so I thought I could help and we could create something more universal. Where can I get more info about this initiative?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.