I genuinely don't know how npm cli and website aren't considered abandonware at this point. Trusted Publishing is broken, features behaving inconsistently across them, token management is non-existent, obscure error messages... 😔