Introducing npm package provenance
How to verifiably link npm packages to their source repository and build instructions. ⌘ Read more