NPM staged publishing for supply-chain security | Hacker News Reader