You are welcome! Recently discovered it and found it genuinely useful. Fixed a bunch of issues in my workflows too :)

few more tips here: https://github.com/bodadotsh/npm-security-best-practices