The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. I’m happy to announce that you can now beta-test two-factor authentication protection for individual packages in the npm Registry. This setting requires that every publication of a protected package be authorized by a one-time password. This requirement is enforced even if m