Added
- Isolated packed-consumer TypeScript validation for CommonJS, default, and named strategy imports.
- Enforcement of the expected npm package contents before staging a release.
Changed
- Added safe npm publication defaults that target npmjs.org under the
nextdistribution tag. - Pinned the npm CLI used for staged publishing for reproducible releases.
Security
- Prevented GitHub checkout credentials from persisting into test and release workflow steps.