Comment by bilalq

You're probably already planning this, but please setup an alarm to fire off if a new package release is published that is not correlated with a CI/CD run.