GitHub Package Registry currently supports Docker images and npm, NuGet, Maven, and RubyGem packages.

GitHub Package Registry launched on Friday, less than a year after Microsoft acquired GitHub for $7.5 billion.

GitHub has introduced the GitHub Package Registry, a package management service integrated into GitHub that allows developers to publish private or public packages next to their source code ...

GitHub has resolved numerous vulnerabilities in Node.js packages tar and @npmcli/arborist, with the worst allowing file overwrites and arbitrary code execution.

A cautionary tale of how a developer tool limit case could derail cybersecurity protections if not for quick thinking, public outreach, longtime relationships, and a vendor willing to listen and ...