PackagePass

Policy

Acceptable Use Policy

This Acceptable Use Policy protects PackagePass, customers, downstream package consumers, and the reliability of the registry.

Effective date

May 5, 2026

Provider

Sedrino Labs, Inc.

Kentucky, United States

Rules for safe, lawful, and reliable use of PackagePass package distribution, registry, API, dashboard, and automation features.

1. Illegal or harmful use

  • Do not use PackagePass to violate law, regulation, sanctions, export controls, or third-party rights.
  • Do not upload, publish, distribute, or enable malware, credential theft, spyware, botnets, destructive code, phishing kits, or material designed to compromise systems.
  • Do not use PackagePass to harass, threaten, exploit, defraud, or harm people or organizations.

2. Package and dependency abuse

  • Do not publish packages that intentionally impersonate another package, namespace, company, maintainer, or customer.
  • Do not include secrets, credentials, private keys, tokens, payment data, or sensitive regulated data in packages unless you have a lawful basis and appropriate safeguards.
  • Do not use PackagePass to evade vulnerability scanning, software supply chain review, license obligations, or downstream customer restrictions.

3. Platform integrity

  • Do not bypass access controls, probe unauthorized systems, scrape non-public data, overload the registry, interfere with availability, or attempt to defeat rate limits.
  • Do not share accounts or tokens in a way that undermines auditability or access control.
  • Do not reverse engineer PackagePass except where allowed by law or written agreement.

4. Messaging and marketing abuse

  • Do not use PackagePass contact, invite, webhook, or notification features for spam, abusive outreach, deceptive messages, or unauthorized marketing.
  • Do not upload contact lists or personal information unless you have rights to use that information with PackagePass.

5. Enforcement

We may investigate suspected violations and may remove content, throttle traffic, disable tokens, suspend features, suspend accounts, notify administrators, or terminate access. We try to take proportionate action, but urgent security or legal issues may require immediate action.

6. Reporting

Report suspected abuse, security issues, or package distribution misuse using the contact channel listed below.

Contact

Questions, notices, privacy requests, and abuse reports can be sent to michael@sedrino.com.