GitHub announces npm security changes to tackle supply-chain attacks | Vertech News