This week, GitHub rolled out a major security update for the npm registry, aimed at making it safer from supply chain attacks. The update involves revoking a type of token called “classic” or “long-lived” tokens, which many developers have used for years to authenticate their package publishing and installations. Moving forward, developers need to switch










