GitHub increases verifiability of npm packages for added security

GitHub now allows npm package developers to link their published packages to their source code to prove that the package was built from the source. This will help build trust and boost security. Read more…
Neowin