Fail CI when dependencies in your lockfile lose npm provenance or trusted publisher status - View it on GitHub