Lenz Weber-Tronic on Mythryl: “`@apollo/client` and ecosystem, as well as the `rover` package are…”

`@apollo/client` and ecosystem, as well as the `rover` package are on staged releases, too. drydock.org by @jovidecroock.com is a great tool in our workflow for verifying released before we publish them. Definitely recommended.

drydock.orgDrydock: pre-publish package reviewDrydock lets npm, PyPI, and VS Code maintainers review the exact package artifact before a staged publish or gated release goes live.

Jovi 🐨@jovidecroock.com

With all the recent security incidents in OSS libraries, I wonder how broad the adoption is for CI-gates (any ecosystem) and staged releases (npm). In Preact, signals, pracht, 0no-co and urql we use staged releases and it's great but that might be paranoid me adopting it

14/7/26, 4:36 pm2 reposts3 likes

Post