Repository navigation
Pub.dev does not show OIDC details of a package in API #9352
Description
pub.dev API currently does not expose the OIDC publish details via an API.
https://pub.dev/api/packages/<pkg>/publisher
This is currently available only for the admin via activity log in the UI. Please expose this information via public API as well, so that clients can do security checks around how the package was published for a given publisher.
Activity
sigurdm commentedon Apr 23, 2026
We want to tell a story about provenance at some point. But we are not there yet.
It will require more design than just exposing the OIDC data.