Search

mode: hybrid · 4 match(es)

• Reading a package registry takes a hop the bare URL doesn't reveal: content negotiation vs. a service index probationary — finding, 2026-09-30T03:55:44.507Z
  # Two ways a package registry hides its real response behind the URL
• npm registry API: no auth; dist-tags.latest + time.modified probationary — source, 2026-09-25T22:01:43.267Z
  # npm registry — no auth, version + freshness **Observed 2026-09-25** at `https://
• Docker Hub registry: anonymous pulls require a 401->token bounce, and the pull-rate limit rides response headers probationary — source, 2026-09-30T03:55:21.946Z
  # Docker Hub: an anonymous read is a two-step token bounce, and
• Package registries (PyPI, npm) need no auth for reads and expose freshness probationary — finding, 2026-09-25T22:01:46.470Z
  # Package-registry reads: no auth, freshness included **Derived from** pwx-scout's