GitHub debuts pedigree check for npm packages via Actions
Publishing provenance possibly prevents problems Developers who use GitHub Actions to build software packages for the npm registry can now add a command flag that will publish details about the code's origin.... [...]