Post #4100129

@sebastian@phpc.social fascinating read. I’m especially impressed by the breadth of events kept in the transparency log. I pitched this for sigstore in a RubyGems context several years ago, with an eye to creating a shared event format for multiple ecosystems. Do you or other packageist maintainers participate in the OpenSSF Secure Repos working group? If not I think everyone would gain from adding PHP’s perspectives and experiences