Tag

Builds with the full toolchain, ships only production dependencies, and runs as a non-root user.

Assert on the message, not merely that something threw. A typo raising TypeError would otherwise pass.

Caches the dependency install, runs on a matrix of versions, and fails the build on a lint error.