The secure way to release an npm package in 2026—Martian Chronicles, Evil Martians’ team blog
evilmartians.com
How to protect your npm package from being stolen in a supply chain attack and improve its position in security ratings