GitHub: Our plan for a more secure NPM supply chain(github.blog)

https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/