Skip to content

[Feature Request]: Prevent the publishing of anonymous packages to the JPR #1

@ChrisIsKing

Description

@ChrisIsKing

Is your feature request related to a problem? Please describe.
Currently, the jvcli allows publishing packages to the Jivas Package Repository (JPR) without requiring authentication or identification. This can lead to anonymous packages being uploaded, making it difficult to track, validate, or manage them properly.

Describe the solution you'd like

  • Update the jvcli to enforce user authentication or identification before allowing package uploads to the JPR.
  • Require the user to be logged in or provide valid credentials (such as an API key) so that every package posted can be associated with a known identity.

Describe alternatives you've considered

  • Implement a warning or prompt when attempting to publish anonymously, rather than a hard restriction. However, this would still allow anonymous uploads if the user chooses to ignore the warning.
  • Use a separate command or configuration flag to lock down the repository, but having a core check within jvcli ensures consistency and reduces the chance of user error.

Additional context

  • The jvcli is a command line interface tool that interacts with the Jivas Package Repository. It provides various commands for managing and building agent-related packages.
  • By preventing anonymous uploads, we can maintain better package traceability, ensure security, and foster a more trustworthy ecosystem.
  • This change might involve updating authentication flow, adding checks within the publish command, and potentially storing or retrieving user credentials from a secure location.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions