Plus the vuln management story, along with any "left-pad" if the package registry tries to "innovate" and thus falls prey to existing anti-patterns

If you start to develop bad feelings toward AWS IAM, you can just try to do anything sane in GCP and then wonder if GCPs IAM team is secretly just a marketing campaign to get more people to use AWS. Or maybe they got promoted and lost interest 50/50

github.com/Zeus-Labs/Ze... (Apache 2) may interest you, and/or github.com/WithSecureLa... (same), or both since Zeus has their own fork of it

There's a "cybersecurity / infosec" feed from the feeds directory and it isn't terrible: bsky.app/profile/did:...