New stricter rules from GitHub for code packages after security investigation

GitHub has added a 48-hour expiration window for unvalidated npm trusted publishing configurations, closing a supply chain loophole that allowed attackers