56,966 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08755-6ceb-722c-901b-fde0a0ff850f

Publishing More Securely on npm: Guidance from the OpenJS Security Collaboration Space

openjsf.org · published 14 November 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at openjsf.org Wayback capture

2blogs citing

First cited: 3 Dec 2025
Most recent: 1 Jul 2026
Rank this month: not ranked
Links from this post: 10
Words captured: 1,119

Cited by

Blog

In the post

Date

blog.ulisesgascon.com

Newsletter #015: A Break from Survival Mode 🥹 Read at the source ↗

1 Jul 2026

blog.ulisesgascon.com

Newsletter #011: Secure Publishing, Lodash Overhaul & Express Releases 🛡️ Read at the source ↗

5 Feb 2026

blog.ulisesgascon.com

Secure npm package publishing in 2026: A Complete Guide Read at the source ↗

3 Feb 2026

Human Who Codes - Human Who Codes

How GitHub could secure npm Read at the source ↗

6 Jan 2026

blog.ulisesgascon.com

Newsletter #010: Wrapping Up the Year with Talks, Security Work and Big Releases 🎁 Read at the source ↗

3 Dec 2025

Links from this post

Link

Host

https://github.com/openjs-foundation/security-collab-space

github.com

https://github.blog/security/supply-chain-security/best-practices-to-keep-your-projects-secure-on-github/?utm_source=chatgpt.com

github.blog

https://docs.npmjs.com/trusted-publishers

docs.npmjs.com

https://github.com/npm-pub-2025/local-publish

github.com

https://docs.github.com/en/actions/tutorials/publish-packages/publish-nodejs-packages

docs.github.com

https://github.com/step-security/wait-for-secrets

github.com

https://github.com/npm-pub-2025/ci-publish

github.com

https://github.com/npm-pub-2025/4-trusted-publish

github.com

https://github.com/openjs-foundation/cross-project-council

github.com

https://slack-invite.openjsf.org/

slack-invite.openjsf.org