#supply chain security

Before You Hit Publish: The Security Checklist for Taking Your GitHub Repository Public

I maintain a handful of public demo repos myself — passkey-demo, ratelimit, ytd, tmux — and every single one of them we…