Consider Enabling Immutable Releases for Supply Chain Security

[jubalm]

Immutable Releases for Supply Chain Security

Hi @dolanmiu,

Given that this library is being widely adopted by various platforms and applications, most recently Claude Desktop, I wanted to suggest considering GitHub's new Immutable Releases feature for enhanced supply chain security.

Why this matters

As usage grows, this repository could become an attractive target for supply chain attacks. Immutable releases would prevent tampering with published releases and provide cryptographic attestations for integrity verification.

Implementation

The feature is currently in public preview and can be enabled at the repository level.

• GitHub's Immutable Releases docs
• How to enable it

Thought this might be worth considering given the library's increasing adoption.