DevOps
fromThe Hacker News
1 day agonpm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
Staged publishing requires maintainer 2FA approval before npm package versions become publicly installable, improving supply-chain security for CI/CD and trusted publishing.