NPM and Sigstore: Making JavaScript secure by default | Hacker News Reader