npm staged publishing is live - a human approval step enters the JavaScript supply chain
npm has shipped staged publishing: packages can now sit in a pending state requiring explicit human approval before becoming installable—a direct response to AI-assisted publishing pipelines creating new supply chain exposure.
2 h ago 8 8











