cf. - https://github.blog/security/supply-chain-security/introducing-npm-package-provenance/ - https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions - https://docs.npmjs.com/trusted-publishers
cf.