Publishing packages to npm is a critical step in modern JavaScript development, and securing that process is more important than ever. Traditionally, npm publishing relied on long-lived access tokens stored…