npm Just Shipped New Supply Chain Controls. Watch How Your Organization Misreads Them.

GitHub’s new npm install source controls restrict non-registry install sources. The 2FA-gated publishing requirement adds a human approval…