Security Practices for secure npm publishing
- Enable 2FA
- Enable "Trusted Publisher" in npm package settings to allow third party publisher(i.e. github workflow, gitlab workflow etc)
- Use tools like snyk.io, safedep.io for scanning vulnerabilities in your project dependencies