Supply Chain Security, in plain English.

Secure Package Publishing Checklist for Open Source Maintainers

Publishing a package to a public registry makes your code part of thousands of supply chains. This checklist covers the security controls that responsible maintainers implement before and during publication.