Publish NPM package using a GitHub Actions workflow

[Juansecu]

For trust enhancement, the best thing to do related to publishing the NPM package to the NPM registry is to automate the publishing of this package using a GitHub Actions workflow instead of publishing it manually, so the provenance of the package's source code can be verified, just like in the following example:

References

• Generating provenance statements