[STRiDEX]

That's fair, I'm referring to the number of mistakes that happen with local publishing. Publishing the wrong branch, not building from latest etc

[skydhash]

So add a wrapper for that, a quick script that checks which branch and revision you are publishing from. The issue here is publishing from a CI you do not control that well and with automated events.

[paxys]

You can run the exact same script locally as you do in CI, with the only difference being the addition of a 2FA prompt.

[STRiDEX]

That's a good point, I would lose package provenance that way. I guess that is fine since it didn't prevent anything here.

I can look into that.