microsoft / microsoft/TypeScript
Enable npm Build Provenance
Open
Nobody has claimed this yet.
Infrastructure
- Dominant language
- Go
- Stars
- 111k
- Forks
- 14.4k
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 117
Description
We would like to ensure that TypeScript can provide provenance and publish attestation on npm. This may require some amount of reconfiguration with how TypeScript's builds are created.
@weswigham already has this working on #59013 for nightly builds, but not yet for major releases.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the implementation described in #59013 for nightly builds, then compare it with the configuration used to create major releases. Done means major TypeScript releases publish npm provenance statements and attestations, not only nightly builds.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- build-system, release
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100