Move to NPM trusted publishing
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 55/100
Research direction
Read the issue references, especially the deck.gl-raster .github/workflows/release.yml example, then locate the package publishing workflow in stac-react. Compare the current token-based setup with trusted publishing and verify that publishing no longer depends on a token and still completes successfully.
Written by the indexing model from the issue text.
Description
As supply chain attacks get worse, we want to move our packages to be published only by trusted publishing.
This package is currently allowed to publish by token.
See https://github.com/developmentseed/how/issues/475 and see https://github.com/developmentseed/deck.gl-raster/blob/main/.github/workflows/release.yml for an example of trusted publishing. Also ref https://github.com/developmentseed/deck.gl-healpix/issues/6
- Dominant language
- TypeScript
- Stars
- 34
- Forks
- 4
- PR merge metrics
- No merged PRs in 30d
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from developmentseed/stac-react
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
-
Difficulty 5/5 Over a week Newbie friendliness 42/100
All issues in developmentseed/stac-react
Similar issues
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
tomjn/coilbox-hub#454 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Maintainers usually reply within 1 day
-
api: spanner
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
googleapis/google-cloud-node#9513 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 92/100
Maintainers usually reply within 1 day
-
SegmentedControl calls Math.random() during render, breaking Next.js cacheComponents prerenderingOpen
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
mantinedev/mantine#9244 ·
Maintainers usually reply within 8 days