diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 92274c6c2..a68e82965 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -23,12 +23,12 @@ jobs:
     strategy:
       matrix:
         dotnet-version: [ '6.0.x' ]
-        node-version: [ '18.x' ]
+        node-version: [ '20.x' ]
     steps:
-    - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+    - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
 
     - name: Setup Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
       with:
         node-version: ${{ matrix.node-version }}
         COMPOSEUI_SKIP_DOWNLOAD: ${{env.COMPOSEUI_SKIP_DOWNLOAD}}
@@ -99,7 +99,7 @@ jobs:
 
     # By uploading it's shared with the other workflows that are reusing this
     - name: Upload Shell Binaries
-      uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+      uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
       with:
         name: shell-binaries
         path: ${{ github.workspace }}/src/shell/dotnet/Shell/bin/Release/net6.0-windows/
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 649560a79..8989c759d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,7 +22,6 @@ jobs:
     permissions:
       contents: write
     steps:
-
       # Using shared artifact from build workflow
       - name: Download Artifact
         uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
@@ -52,13 +51,16 @@ jobs:
     name: Publish Package to npmjs
     runs-on: windows-latest
     needs: upload
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
-          node-version: 18
+          node-version: 20
           registry-url: https://registry.npmjs.org/
       - run: |
              lerna publish from-package --no-private --yes
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
+          NPM_CONFIG_PROVENANCE: true
diff --git a/package.json b/package.json
index 131a7dbcb..740f3a560 100644
--- a/package.json
+++ b/package.json
@@ -10,6 +10,10 @@
     "src/fdc3/js/*",
     "prototypes/process-explorer/*"
   ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/MorganStanley/ComposeUI.git"
+  },
   "devDependencies": {
     "lerna": "8.1.2"
   }
diff --git a/src/fdc3/js/composeui-fdc3/package.json b/src/fdc3/js/composeui-fdc3/package.json
index 4c9bb7caf..02df9356f 100644
--- a/src/fdc3/js/composeui-fdc3/package.json
+++ b/src/fdc3/js/composeui-fdc3/package.json
@@ -23,6 +23,14 @@
     "jest-environment-jsdom": "^29.7.0",
     "rxjs": "^7.8.1"
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/morganstanley/ComposeUI.git"
+  },
+  "publishConfig": {
+    "access": "restricted",
+    "provenance": true
+  },
   "devDependencies": {
     "@rollup/plugin-commonjs": "25.0.7",
     "@rollup/plugin-node-resolve": "15.2.3",
diff --git a/src/messaging/js/composeui-messaging-client/package.json b/src/messaging/js/composeui-messaging-client/package.json
index 7ae3673d7..82b2d5a02 100644
--- a/src/messaging/js/composeui-messaging-client/package.json
+++ b/src/messaging/js/composeui-messaging-client/package.json
@@ -16,6 +16,14 @@
         "build:rollup": "rollup -c",
         "test": "jest"
     },
+    "publishConfig": {
+        "access": "public",
+        "provenance": true
+    },
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/morganstanley/ComposeUI.git"
+    },
     "author": "Morgan Stanley",
     "license": "Apache-2.0",
     "devDependencies": {
diff --git a/src/shell/js/composeui-node-launcher/package.json b/src/shell/js/composeui-node-launcher/package.json
index 9b7c15f06..874913e4c 100644
--- a/src/shell/js/composeui-node-launcher/package.json
+++ b/src/shell/js/composeui-node-launcher/package.json
@@ -10,7 +10,7 @@
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/morganstanley/ComposeUI.git#main"
+    "url": "git+https://github.com/morganstanley/ComposeUI.git"
   },
   "scripts": {
     "clean": "rimraf output",
@@ -18,6 +18,10 @@
     "install": "node ./src/cli/install.js",
     "test": "jest"
   },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "bin": {
     "composeui": "./output/cli/cli.js"
   },