Liked
Introducing npm package provenance | The GitHub Blog
by 
Post details
How to verifiably link npm packages to their source repository and build instructions.
