l3montree-dev / l3montree-dev/devguard
Dependency Proxy Profiling/ Recording Mode
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 161
- Forks
- 43
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 37
Description
To ease the rollout for organizations of the dependency proxy, it would be nice to offer a profiling/ recording mode where all requested packages and versions are recorded and saved in the config as whitelist. So that when after that recording over a period of time, the ratio of hardly blocked dep installs is very reduced.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue does not name a file, test, or entry point; start by locating the dependency proxy implementation and its configuration or whitelist handling. Define the recording period and persistence behavior, then verify that observed package and version requests are saved as a whitelist and reduce blocked installs.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100