Without identity federation via oidc it’s basically not really a replacement for verdaccio
Preferably I do not use a client on my machine to publish a package. That’s what I meant, modern registries should always support working with oidc providers to support publishing credentials from ci/cd systems. Sometimes called trusted publishing: https://repos.openssf.org/trusted-publishers-for-all-package...