Generate npm provenance statement for releases

[aeharding]

Hi there!

I would like to see radashi support npm provinence for npm releases. :)

[aleclarson]

I've added --provenance to our publishing script: a9f9a60

That script will run in GitHub CI.

Now I'm curious if we can disable npm publish without --provenance 🤔

[aeharding]

Awesome!!

Possibly by adding provenance=true to .npmrc?

[aleclarson]

@aeharding Perfect, thanks!

[aleclarson]

Seems to be working 😄