The @vltpkg team launched "reproduce" today, an #OSS tool that independently verifies whether published npm packages can be faithfully rebuilt from their source code. With recent supply chain attacks exposing provenance limitations, this innovative approach is already showing better adoption rates than traditional methods. Check it out ➳ https://socket.dev/blog/vlt-launches-reproduce #JavaScript