Published to npm and PyPI by GitHub Actions over OIDC trusted publishing, so no token is stored anywhere. The npm tarball carries a provenance attestation linking it to this commit and run.
Published to npm and PyPI by GitHub Actions over OIDC trusted publishing, so no token is stored anywhere. The npm tarball carries a provenance attestation linking it to this commit and run.