Starting today, when you build your npm projects on Framer Actions, you can publish provenance alongside your package by including the --provenance flag. This provenance data gives consumers a verifiable way to link a package back to its source repository and the specific build instructions used to publish it (see example on npmjs.com).

Under the hood, we collect the following metadata about the source repository and specific build instructions:

Check out our documentation for how to get started with the public beta and read on to learn more about why we built this!