publish npm module with provenance statement

Provenance statements are a way to establish where a package was built and who published a package, which can increase supply-chain security and transparency for the packages. You can read about this in more detail in the npm documentation . Having a provenance statement doesn’t guarantee the package has no malicious code. Instead, npm provenance provides a verifiable link to the package’s source…