thirdpass-org/thirdpass

View on GitHub ↗ ★ 22 Rust

A multi-ecosystem package code review system.

7 mentions on Hacker News by 3 people: 1 story, 6 comments · first 2021-11-05 · latest 2023-02-24

Mentions per year 7 mentions · busiest year 2022 (4)

20082026

All Stories Comments Newest Top Oldest

…or trying to assign trust onto random developers. [1]: https://github.com/crev-dev/crev [2]: https://github.com/vouch-dev/vouch [3]: https://github.com/mozilla/cargo-vet
comment by remram · 2023-02-24 · in NPM repository flooded with 15,000 phishing packages
…seems like a much more viable solution to scale trust. [1]: https://github.com/crev-dev/crev [2]: https://github.com/vouch-dev/vouch [3]: https://github.com/mozilla/cargo-vet
comment by remram · 2022-11-02 · in Dozens of malicious PyPI packages discovered targeting developers
…to cargo-vet that has been mentioned before here on HN: - https://github.com/crev-dev/crev - https://github.com/vouch-dev/vouch Anyone know of any more alternatives or similar tools already available?
comment by diggan · 2022-06-13 · in Vetting the Cargo
▲ 2
Vouch – A multi-ecosystem package code review system
story by diggan · 2022-06-10 · 0 comments
Two more alternatives to crev: https://github.com/vouch-dev/vouch https://github.com/mozilla/cargo-vet
comment by rndhouse · 2022-06-10 · in Gitsign
Hello megumax! I'm working on a solution along the lines that you've suggested: https://github.com/vouch-dev/vouch Vouch lets users create and share reviews for NPM packages. Project dependencies can then be checked against those reviews.…
comment by rndhouse · 2021-11-06 · in RFC: Make NPM install scripts opt-in
I've created Vouch in an attempt to address this problem: https://github.com/vouch-dev/vouch Vouch lets users create and share reviews for NPM packages. Project dependencies can then be checked against those reviews. Vouch uses extensions…
comment by rndhouse · 2021-11-05 · in Embedded malware in RC (NPM package)