OUR PLAN FOR A MORE SECURE NPM SUPPLY CHAIN

Summary from the TLDR Web Dev newsletter

In response to recent security breaches, GitHub is improving npm security to safeguard the open source ecosystem. It is mandating two-factor authentication for local publishing, implementing granular tokens with limited lifespans, and promoting trusted publishing. Legacy tokens and TOTP-based 2FA will be deprecated, and token publishing access will be restricted by default.