npm-ripe-guard

Version updated for https://github.com/jeffrey200/npm-ripe-guard to version v1.0.3.

• This action is used across all versions by ? repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

The npm-ripe-guard GitHub Action provides a security mechanism to protect against supply-chain attacks by blocking the installation of npm packages that were published less than 24 hours ago. It acts as a proxy that enforces a 24-hour quarantine period for newly published package versions, ensuring only mature and potentially safer versions are installed in your projects. This action automates the process by seamlessly integrating into GitHub workflows and configuring the npm registry and release-age settings for subsequent steps.

What’s Changed

Full Changelog: https://github.com/jeffrey200/npm-ripe-guard/commits/v1.0.3

• jeffrey200
• GitHub Actions