Replies: 1 comment 2 replies
-
There is currently no "author" identification in the package.json, only details on the package (docs/url etc). This should always relate to the package and not the author or publisher. We may add something in the future but there's nothing in there now. The only information is on the site, that being the publisher, i.e. the person who pushed the package to the site. |
Beta Was this translation helpful? Give feedback.
2 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I expect a few open-source actionscript libs have authors that might not publish their packages to APM immediately. Then someone will probably do that on their behalf.
In the
package.json
file, it might be useful to identify the library author(s), as opposed to the package maintainer(s). This way it will be possible to correctly attribute a lib to its authors in the repository, even when published by another person/entity.I guess as a user, you mostly need to trust the publisher of the lib though.
Any thoughts?
Beta Was this translation helpful? Give feedback.
All reactions