Setting up NPM Provenance

Author: Paul Marsicovetere

.github/workflows/release.yml

@@ -8,6 +8,14 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+      issues: write
+      repository-projects: write
+      deployments: write
+      packages: write
+      pull-requests: write
 
     steps:
       - uses: actions/checkout@v2

package.json

@@ -81,6 +81,9 @@
     "typings-tester": "^0.3.1",
     "webpack": "^5.76.3"
   },
+  "publishConfig": {
+    "provenance": true
+  },
   "files": [
     "src",
     "lib",