https://www.infoq.com InfoQ Continuous Delivery News feed https://www.infoq.com/news/2026/08/github-npm-actions-defaults/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=Continuous+Delivery-news <img src="https://res.infoq.com/news/2026/08/github-npm-actions-defaults/en/headerimage/generatedHeaderImage-1785830307506.jpg"/><p>GitHub consolidated the npm and Actions changes it shipped from March to July 2026 against supply chain attacks, several of which alter defaults rather than add options. Hacker News discussion focused less on the individual controls than on whether waiting periods are the right instrument, or a substitute for author-side package signing.</p> <i>By Steef-Jan Wiggers</i> Software Supply Chain Automation GitHub Actions Open Source github Continuous Delivery Security Development DevOps news Sat, 08 Aug 2026 07:45:00 GMT https://www.infoq.com/news/2026/08/github-npm-actions-defaults/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=Continuous+Delivery-news Steef-Jan Wiggers 2026-08-08T07:45:00Z /news/2026/08/github-npm-actions-defaults/en