Provenance Isn't Proof: What to Check Before You `npm install -g` a Tunnel CLI

npm provenance isn't proof of safety. Learn how to vet a tunnel CLI before npm install -g: pin versions, ignore-scripts, verify checksums, limit