build: enable npm publish provenance

Author: Planeshifter

lib/node_modules/@stdlib/_tools/scripts/publish_packages.js

@@ -133,7 +133,7 @@ var CLI_INSTALLATION_SECTION = [
 ].join( '\n' );
 
 var mainDir = join( __dirname, '..', '..', '..', '..', '..' );
-var DOTFILES = [ '.editorconfig', '.gitignore', '.gitattributes', '.npmrc', 'CONTRIBUTORS', 'NOTICE', 'CITATION.cff' ];
+var DOTFILES = [ '.editorconfig', '.gitignore', '.gitattributes', 'CONTRIBUTORS', 'NOTICE', 'CITATION.cff' ];
 
 var WORKFLOW_CLOSE_PULLS = [
 	'#/',
@@ -740,6 +740,7 @@ function publish( pkg, clbk ) {
 		customLicense = false;
 	}
 	fs.copyFileSync( join( __dirname, 'templates', '.npmignore.txt' ), join( dist, '.npmignore' ) );
+	fs.copyFileSync( join( __dirname, 'templates', '.npmrc.txt' ), join( dist, '.npmrc' ) );
 	fs.copyFileSync( join( __dirname, 'templates', 'Makefile.txt' ), join( dist, 'Makefile' ) );
 	fs.copyFileSync( join( __dirname, 'templates', '.eslintrc.js.txt' ), join( dist, '.eslintrc.js' ) );
 	writeFileSync( join( dist, 'CHANGELOG.md' ), replace( CHANGELOG, '<pkg>', distPkg ) );

lib/node_modules/@stdlib/_tools/scripts/templates/.npmrc.txt

@@ -0,0 +1,31 @@
+#/
+# @license Apache-2.0
+#
+# Copyright (c) 2024 The Stdlib Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#/
+
+# Configuration for [npm][1].
+#
+# [1]: https://docs.npmjs.com/files/npmrc
+
+# Disable the creation of a lock file:
+package-lock = false
+shrinkwrap = false
+
+# Disable automatically "saving" dependencies on install:
+save = false
+
+# Generate provenance metadata:
+provenance = true