"Actively advised against GitHub's trusted publishing for critical packages due to lack of 2FA, demonstrating a commitment to security; proposed as a potential home for NPM registry."