anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 02:05:26 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

Adopt Trusted Publishing and Supply Chain Security Best Practices #1894

New Issue
Open
opened 2026-02-16 17:33:06 -05:00 by yindo · 1 comment
yindo commented 2026-02-16 17:33:06 -05:00
Owner
Copy Link
Copy Source

Originally created by @AdnaneKhan on GitHub (Sep 30, 2025).

Originally assigned to: @thdxr on GitHub.

As I’m sure you may be aware GitHub recently announced changes to NPM publishing (https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/) and is encouraging projects to switch to trusted publishing as soon as they are able.

OpenCode currently uses a long-lived NPM token for publishing and does not leverage basic features such as branch protection for the default branch.

Can OpenCode adopt these measures to protect downstream users?

Originally created by @AdnaneKhan on GitHub (Sep 30, 2025). Originally assigned to: @thdxr on GitHub. As I’m sure you may be aware GitHub recently announced changes to NPM publishing (https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/) and is encouraging projects to switch to trusted publishing as soon as they are able. OpenCode currently uses a long-lived NPM token for publishing and does not leverage basic features such as branch protection for the default branch. Can OpenCode adopt these measures to protect downstream users?
yindo commented 2026-02-16 17:33:06 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Sep 30, 2025):

makes sense

@rekram1-node commented on GitHub (Sep 30, 2025): makes sense
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#1894
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?