This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Zach Leatherman
zachleat.com
did:plc:xpchjovbk6sxl3bv74z7cs54
Is there a way to configure an npm package to *require* provenance and fail any publish attempts that don’t have it? I don’t think the Trusted Publisher stuff has that option, if I’m reading it correctly.
2025-11-25T17:35:54.133Z