-
Notifications
You must be signed in to change notification settings - Fork 48
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: remove support for special handling of material verification for npm #524
Comments
I suppose we may want to be able to verify provenance generated during the public beta. So maybe we can check if it's been generated as of a certain date so that we can check this for provenance generated after the GA? |
This should work, good idea. |
Or maybe there's a versioning in their buildType or something else to identify stable format? |
That's maybe an even better idea. |
Last time we talk they did not have, ie it was tied to the CLI version. But I think they will change that, so need to follow-up |
This will get fixed by #641 |
#641 is merged. |
See #521 (comment)
The text was updated successfully, but these errors were encountered: