How to protect your npm package from being stolen in a supply chain attack and improve its position in security ratings
