GitHub Hardens npm and Actions Defaults, Drawing Debate over Delays versus Signing

GitHub consolidated the npm and Actions changes it shipped from March to July 2026 against supply chain attacks, several of which alter defaults rather than add options. Hacker News discussion...