Provenance: articles and guides

How npm trusted publishing works: short-lived OIDC instead of npm tokens, automatic provenance, setup fields, requirements, and what it does not stop.

Human-in-the-loop and provenance are as important to AI security as injection defense — but they are a dial, not a switch. A register of where each one is worth it (high-stakes, irreversible) and where over-applying it adds latency, alert fatigue and a product nobody uses.

A maintainer account compromise poisoned keyv, flat-cache, file-entry-cache and the rest of the family, then spread to 868 more packages across 1,381 versions — over 2 billion monthly installs. The releases were signed by GitHub Actions and the provenance checks out. That is the part worth your attention.