Actually there is an option to restrict to only OIDC publishing. It is a bit hidden and relies on a different form for reasons I really cannot understand. Npm U

Actually there is an option to restrict to only OIDC publishing. It is a bit hidden and relies on a different form for reasons I really cannot understand. Npm UX is just so bad. Point 4 from https://npmdigest.com/guides/npm-trusted-publishing#ux-problem https://npmdigest.com/guides/npm-trusted-publishing#ux-probl... (I wrote that guide page for myself because I always get annoyed when dealing with npm OIDC)