Releasing Packages with a Valet Key: NPM, PyPI, and Beyond

Posted by BYK on Tuesday December 09, 2025 @02:29PM
from the byk.im dept.

( 1 comment | on HN )

Re:Releasing Packages with a Valet Key: NPM, PyPI, and Beyond by BYK on Tuesday December 09, 2025 @02:29PM (#46209409)

How we built a secure, auditable, and low-friction release system at Sentry that is resistant to supply-chain attacks like Shai-Hulud

[ Parent | on HN ]