Glossary: Vulnerability, Asset and Change Management

Public repository

Also written: public repo, package registry, npm

Code or packages anyone can read, such as a public GitHub project or a registry like PyPI or npm. Secrets in its history are exposed, and registries can carry lookalike or hijacked packages.