We had trouble with our publishing process to npmjs.com b/c of the elevated security principles GitHub enforced (which is a good thing!).
This is fixed now, and v3.0.7 is live.
The publishing process now uses the most secure OIDC-based "trusted publishing", including provenance.
Happy testing!
npmjs.com