In the code, we disable provenance and set it to be true before publishing the main package:
if [ "$SHOULD_PUBLISH" = true ]; then
# Prepare and publish the platform specific packages
yarn prepareAndPublishAddons
# Publish the base package, setting provenance
# to true as it's recommended. The platform specific packages
# don't need to have it, but we could edit them to pass provenance.
npm config set provenance true
npm publish --access public
fi
In the code, we disable provenance and set it to be true before publishing the main package: