O Expedicionário 2 months ago This seems to be the move forward The GitHub BlogOur plan for a more secure npm supply chainGitHub is strengthening npm's security with stricter authentication, granular tokens, and enhanced trusted publishing.