Posted Jun 4, 2026 16:21 UTC (Thu) by cortana (subscriber, #24596) [Link]
According to this description:
npm binds trusted publishing to a repository plus a workflow filename, not to a branch
... making the repo the unit of trust. I celebrate NPM's bold decision to enforce the concept of Git as a distributed system of repos, rather than the centralized model favoured by enterprises of a single repo with branch protection rules...
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。