Open the User Activity tab on a project page. Events appear in a table you can sort by when, what changed, or who did it. Filter by person, change type (review, import, publish, and more), and a date range (default last 30 days; clear for all time).
Events you will see
- Import: New, updated, and unchanged counts after a manual upload or repo sync.
- Re-licensing advisories when a package's license changed between versions.
- Component approved, parked, or set back to Needs review.
- License confirmed, license text attached, comments added, Bulk approve runs with who ran them and which licenses.
- Revision published, signed, taken offline, or rolled back to an older snapshot.
- Security scan and finding events appear only for roles that can view security monitoring (editor and above).
- Notification emails (dependency-change digests, security alerts, repository connection) appear as System lines when queued. Type only, no email content or recipients. See Help center → Dependency change digests (Dependency change digests).
User Activity is an internal audit trail for your organization. It never appears on the public attestation page. Organization admins also have an org-wide Activity page in the sidebar.