- Q3/Q4 improvements to [Secure Releases Guide](https://github.com/openjs-foundation/security-collab-space/blob/main/secure-releases.md) Ideas: - Modern version of the [npm Best Practices Guide](https://github.com/ossf/package-manager-best-practices/blob/main/published/npm.md)? - Merge to be a more actionable version of the [SBOM/C-SCRM Challenges and Feedback]( https://docs.google.com/document/d/1VmmOivNJeocns_5XN3ijcpR4BMmz4-mVoGjqvBmOnY8/edit?tab=t.0#heading=h.m9nc0aibj5z5)?