GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ...