AI TCH ECO SOC JO Jonny Rivera · Governed at the Source npm Just Shipped New Supply Chain Controls. Watch How Your Organization Misreads Them. GitHub’s new npm install source controls restrict non-registry install sources. The 2FA-gated publishing requirement adds a human approval…
