Webhooks, Atom feeds, CI tokens and the dependency dashboard

Tools for teams that automate:

• Webhooks notify your systems — signed JSON, Slack or Discord — when a watched package gets a new version, a security notice or a withdrawal.
• Atom feeds of releases for every package, every vendor and the whole repository.
• CI tokens restricted to packages and IP ranges, with an expiry date (see the CI guide in the documentation).
• Projects: upload a site's composer.lock to see which of its plugins and themes are behind, withdrawn or taken down.
• License key vault for the vendor keys you bought, with a reminder before they expire.
• API keys raise the rate limit of the public JSON API.