ChainAlert: npm package release (4.7.1) has no matching tag in this repo
chainalert-bot opened this issue · comments
ChainAlert Bot commented
Dear @contentful/f36-popover maintainers,
Thank you for your contribution to the open-source community.
This issue was automatically created to inform you a new version (4.7.1) of @contentful/f36-popover was published without a matching tag in this repo.
As part of our efforts to fight software supply chain attacks, we would like to verify this release is known and intended, and not a result of an unauthorized activity.
If you find this behavior legitimate, kindly close and ignore this issue. Read more