Move npm publishing in GitHub Actions from NPM_TOKEN to trusted publishing (OIDC).
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Move npm publishing in GitHub Actions from NPM_TOKEN to trusted publishing (OIDC).