npm is implementing staged publishing to introduce deliberate friction into package publication after the Shai-Hulud supply chain attack campaign. The new model introduces a review window before package releases become publicly available, requiring explicit MFA-verified approval from package owners. npm also disabled classic token creation in November and permanently revoked classic tokens on December 9, replacing them with short-lived session tokens and granular access tokens. OIDC-based trusted publishing is being expanded but currently has limitations including inability to publish new packages, manual per-package configuration, and lack of bulk setup API. Session token lifetimes were extended from 2 hours to 12 hours due to user complaints.