Hacker News new | ask | show | jobs
by SEJeff 72 days ago
https://docs.npmjs.com/trusted-publishers/#recommended-restr... This helps mitigate spear phished privileges employees pushing hacked npm packages entirely.