Native packages

[Daniel15]

Please consider packaging the CLI as Linux packages (at least Debian and RPM) and as a Windows installer (MSI). NPM has had a bunch of security issues recently and generally isn't a good way to securely distribute executables.

[jedisct1]

Don't forget Homebrew :)

But if those packages are published via GitHub Actions, they unfortunately become vulnerable to the same kinds of issues as NPM.

There are a few mitigations we can apply first: use Zizmor, pin dependencies to hashes, enable trusted publishing, and add local signatures.