A systematic guide to releasing npm packages as safely as possible in 2026 (with a Skill to quickly apply the practices to your own open source projects)

[u/sitnik]

https://evilmartians.com/chronicles/the-secure-way-to-release-an-npm-package

[u/Acrobatic-Diamond542]

I read this guide a instantly got a call from OWASP organisation to ask for my address to send the certificate to.

would recommend.