Our plan for a more secure npm supply chain - The GitHub Blog

https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/