compare to e.g. https://www.npmjs.com/package/@db-ui/gif#provenance-details-header more information: https://tsmx.net/npmjs-built-and-signed-on-github-actions/ https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions
