Re The @npmjs registry is the heart of the JavaScript ecosystem. In this talk, you’ll hear about the steps GitHub has taken to secure this important part of the software supply chain.
https://githubuniverse.com/events/detail/virtual-schedule/257ca904-0a1b-4b27-8aee-82d8cb9f9d66