Your Exchange / security
Registry security
Check namespace ownership and respond to harmful package material. Every security decision needs evidence and a recorded reason.
Checking reviewer access…
Sign in with GitHub01 / Know the publisher
Namespace ownership verification
Namespace membership does not verify ownership. Independently inspect the proof before recording a decision. Verification is not approval of any extension.
02 / Respond to package material
Block package material
A digest may identify an archive or a packaged file. Blocking revokes approved releases that contain it. Publish updated signed metadata promptly; recording a block alone does not deliver authenticated revocation to installed clients.
Import a bounded digest batch
03 / Active restrictions
Current digest blocks
Up to 500 newest blocks are shown, not a complete lifetime history. Removing a block does not restore revoked releases; review and signed publication remain separate.