All pull requests

Pull requests

• Add a project inventory built from uploaded SBOMs

  #626·simonchrz opened Oct 27, 2026Contributor·

  ·

• Follow npm and Packagist change feeds to revalidate changed metadata

  #625·simonchrz opened Oct 27, 2026Contributor·

  ·

• Answer npm dist-tag ls from the served packument

  #624·simonchrz opened Oct 27, 2026Contributor·

  ·

• Serve npm attestations through the proxy

  #623·simonchrz opened Oct 27, 2026Contributor·

  ·

• Serve dated snapshots of Alpine APK indexes

  #622·simonchrz opened Oct 27, 2026Contributor·

  ·

• Serve the Go vulnerability database at /go/vulndb

  #621·simonchrz opened Oct 27, 2026Contributor·

  ·

• Pass Composer security advisories and filter lists through

  #620·simonchrz opened Oct 27, 2026Contributor·

  ·

• Show the cooldown configuration in the web UI

  #618·simonchrz opened Oct 27, 2026Contributor·

  ·

• Release a new minor version when breaking changes were merged

  #615·simonchrz opened Oct 26, 2026Contributor·

  ·
  2

• Mirror Swift registry releases

  #611·simonchrz opened Oct 25, 2026Contributor·

  ·
  1

• Mirror Homebrew bottles

  #610·simonchrz opened Oct 25, 2026Contributor·

  ·

• Send artifacts to the client while a cache miss is stored

  #609·simonchrz opened Oct 25, 2026Contributor·

  ·
  1

  1

• Mirror CRAN source packages

  #608·simonchrz opened Oct 25, 2026Contributor·

  ·

• Check cooldown on artifact downloads for cargo, gem, hex, pub, conda and helm

  #533·pinguinfuss opened Oct 19, 2026Contributor·

  ·
  1

  3

• Pass upstream 404 and auth failures through, and flag stale npm metadata

  #503·medlabib opened Oct 18, 2026·

  ·
  1

  1

• Add an opt-in open URL cache at /url/

  #399·benoit-nexthop opened Oct 2, 2026·

  ·
  3

• WIP: Move ecosystem configuration to configuration file

  #93·kpfleming opened Apr 18, 2026Contributor·

  ·
  8