Post

Days since forgetting to approve a staged package: 0

Do you want to try out drydock.org? It will show you the diff of the staged package and send you an email when it's done all threat controls

No, it automatically picks up either GitHub gated workflow environments or tarballs that are staged

Thanks. Maybe I need to build something into release-it for this. Any chance you could point me to npm docs re. this? Or is that one of your product USPs? 😬 Product idea: offer hooks or something for other notification mechanisms.

Yea, should add webhooks. slack and email currently, it’s not really a product but I haven’t gotten to open sourcing it just yet. will forward docs when I get home