The last 2 releases on npm (0.24.9, 0.24.10) don't have a corresponding Tag on Git and Release on GitHub.
This makes it hard to track changes, and makes automation like https://github.com/oss-review-toolkit/ort break since they cannot find a corresponding tag, needing manual overrides.
Additionally, in a time with increasingly more supply chain attacks, this makes releases less transparent and less trustworthy; it's harder to follow what was changed in which version.
It would be highly appreciated if releases consistently had Git tags and releases.
The last 2 releases on npm (0.24.9, 0.24.10) don't have a corresponding Tag on Git and Release on GitHub.
This makes it hard to track changes, and makes automation like https://github.com/oss-review-toolkit/ort break since they cannot find a corresponding tag, needing manual overrides.
Additionally, in a time with increasingly more supply chain attacks, this makes releases less transparent and less trustworthy; it's harder to follow what was changed in which version.
It would be highly appreciated if releases consistently had Git tags and releases.