Securing your code
- About audit reports
- Auditing package dependencies for security vulnerabilities
- Generating provenance statements
- About ECDSA registry signatures
- Verifying ECDSA registry signatures
- About PGP registry signatures (deprecated)
- Verifying PGP registry signatures (deprecated)
- Requiring 2FA for package publishing and settings modification
- Reporting malware in an npm package