Rules and approvals

Dry run a change before you make it

Replay recent downloads against a new rule, vulnerability threshold or license list.

Dry run replays up to 90 days of downloads against a proposed change and shows who would be affected. Nothing is saved.

• A new rule: a deny counts downloads allowed today that it would refuse. An allow counts downloads refused today that it would let through.
• Leave out vulnerable versions: tries a safe resolution threshold, respecting waivers.
• Different license lists: tries new allowed, review and blocked lists.

Results list packages, versions, applications (and how many are production), developers, CI pipelines and downloads without a token.