GitHub enforces FIDO 2FA and seven-day token limits after Shai-Hulud npm attack to boost supply chain security.
GitHub, which owns the npm registry for JavaScript packages, says it is tightening security in response to recent attacks.