GitHub Hardens npm and Actions Against Supply Chain Attacks as Vercel Adds CLI Integration Discovery
GitHub has shipped a wave of supply chain security improvements across npm and GitHub Actions, while Vercel extends its CLI to let developers find and install integrations without leaving the terminal.