Generate provenance statements for published packages #1769
Description
With the aim of increasing supply chain security.
https://docs.npmjs.com/generating-provenance-statements
Related?
It seems like provenance was tested but not enabled.
I've noticed that packages over at https://github.com/ardatan/graphql-tools do have provenance statements.