Some MFA requirement to publish a new version of the package would be a good ide...

chasd00 7 months ago | parent | context | favorite | on: Shai-Hulud Returns: Over 300 NPM Packages Infected

Some MFA requirement to publish a new version of the package would be a good idea. In me experience releasing a new version of software is a big enough deal that the product owner is on hand to authorize the release via a separate device no matter how automated the pipeline is.