7 ms·Releasing Packages with a Valet Key: NPM, PyPI, and Beyond1 points by BYK 9mo agoBYK 9mo agoHow we built a secure, auditable, and low-friction release system at Sentry that is resistant to supply-chain attacks like Shai-Hulud