Tag

npm-trusted-publishing

Safeguard articles tagged "npm-trusted-publishing" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

Trusted Publishing for npm: Why Only 14% of Compromised P...

Only 14% of packages compromised since npm launched Trusted Publishing use it. Here's how OIDC-based publishing works, why adoption lags, and what still gets missed.

May 17, 20268 min read