GitHub: Our plan for a more secure NPM supply chain
github.blog