Martin Cattroll comments

Results 27 comments of


                                            Martin Cattroll

"lockfile-include-tarball-url" behaviour is flaky

This has happened on one of our commits, package got a random tarball URL added. 8.15.8.

Ability to get the total count of scenarios to be executed, much like steps can be done currently

Current solution is a hardcoded value for now (looking into a custom formatter) but adds maintenance of manual updating and would not reflect if you were to ignore some scenarios...

[BUG] <title>Subsequent malware attacks and security issues in the npm supply chain

The option I have seen taken by a few now (including us) is to have a minimum age period of pulling new packages releases (3 days as one example but...

[BUG] <title>Subsequent malware attacks and security issues in the npm supply chain

Already an open issue on this specifically regarding the pnpm implementation: https://github.com/npm/cli/issues/8570 Edit: Fairly good conversation already ongoing on https://github.com/npm/rfcs/issues/646

[BUG] <title>Subsequent malware attacks and security issues in the npm supply chain

This is more for projects themselves but having PR requirements where another person must approve a release before it gets published would be good, even mandatory AI scans that if...

[BUG] <title>Subsequent malware attacks and security issues in the npm supply chain

> > Artifactories are also implementing package delay policies such as JFrog have done, a minimum delay before picking up npm packages for publishing. > > [@Lorondos](https://github.com/Lorondos) tried finding references...

[🚀 Feature]: [dotnet] Align and simplify root namespace, who is OpenQA?

I don't know, Selenium 5 feels like the opportune time to correct it and I have always questioned what OpenQA meant in the context of the namespace and aha, so...