diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e6a59ac..8ad1943 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,6 +37,10 @@ concurrency:
 jobs:
   release:
     runs-on: ubuntu-latest
+    environment: npm-publish
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout main
         uses: actions/checkout@v4
@@ -49,9 +53,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22'
           registry-url: 'https://registry.npmjs.org'
 
+      - name: Upgrade npm
+        run: npm install -g npm@11.5.1
+
       - name: Configure git
         run: |
           git config user.name 'vechain-ci'
@@ -90,7 +97,7 @@ jobs:
         if: ${{ !inputs.dry_run }}
         run: npm publish --access public --tag "${{ steps.bump.outputs.dist_tag }}" --provenance
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
 
       - name: Create GitHub Release
         if: ${{ !inputs.dry_run }}
diff --git a/package.json b/package.json
index 674cbee..db0e3e0 100644
--- a/package.json
+++ b/package.json
@@ -2,6 +2,10 @@
   "name": "@vechain/dev-stack",
   "version": "0.1.0",
   "description": "Shared local dev environment for VeChain projects: thor-solo + indexer + block-explorer, with per-project address registration.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vechain/dev-stack.git"
+  },
   "type": "module",
   "main": "./lib/register.mjs",
   "types": "./lib/register.d.ts",