Imagine a collaborative open source project with multiple contributors working on it. As the project progresses, these contributors need to publish their work to the NPM registry. But how can this be done securely when multiple people are involved?
The owner of the package certainly wouldn't want to share their login credentials with every contributor. So what is the best way to handle this situation?