Tag: package origins

On the origin of packages

April 20, 2023 By Mark Otto Off

Introducing npm Package Provenance — As stewards of the official npm registry, GitHub has been keen to improve its security. As of this week, if you build npm packages through GitHub Actions, you can publish the provenance of a package which gives users a way…