GitHub

GitHub Details Staged Overhaul of npm Publishing Security

Hardware‑key 2FA, seven‑day tokens, OIDC trusted publishing anchor a push to counter self‑replicating malware.