Enable 2FA on GitHub
Two-factor authentication is an easy to implement and effective security measure. We ask that you enable 2FA for the GitHub account associated with your package.
Enable 2FA in a package manager
Avoid unauthorized package publication and ensure safer installs by setting up two-factor authentication for your package. Users will have the confidence knowing their open source dependencies haven't been tampered with by a compromised account.
We will provide instructions for setting this up based on your package manager. If you already have this set up, just let us know and we'll confirm.
For services which do not have 2-factor authentication, please use a strong password unique to each service (most people do this via a password manager).