Staged publishing and new install-time controls for npm - GitHub Changelog

Today we’re shipping two updates focused on supply-chain security for npm: Staged publishing is generally available. New --allow-* install source flags (--allow-file, --allow-remote, --allow-directory) complement the existing --allow-git flag. Both…

Engradar shows a summary and links to the original article. The full article is hosted on github.blog.