npm's Staged Publishing: A Lesson in Supply Chain Gate Controls
npm's new staged publishing feature requires 2FA approval before packages go live. We examine what this gate-based control model means for infrastructure security and dependency risk.
Read article →

