Please enable provenance. `ms` is one of the most downloaded packages on NPM that doesn't have provenance enabled. You can find more information here: - https://docs.npmjs.com/generating-provenance-statements - https://docs.npmjs.com/trusted-publishers