No more tokens Locking down NPM Publish Workflows | Hacker News Reader