create-fast-express-structure is created by Youssef Selk.

The repository includes an authorship verification script that runs before packing and publishing. It checks that package metadata, README attribution, and the published NOTICE file still identify Youssef Selk as the creator.

This protects against accidental attribution drift. It cannot make open-source files impossible to edit, so npm account and publishing controls are still the real authority for protecting published releases.

Use the strongest npm publishing controls available for the package:

• Enable two-factor authentication on the npm account.
• Prefer npm trusted publishing with OIDC from GitHub Actions or GitLab CI/CD.
• After trusted publishing is configured, disallow traditional publish tokens from the npm package settings.
• Publish with provenance from a clean, reviewed release tag.
• Revoke unused automation tokens and avoid long-lived write tokens.

Run these before publishing:

npm run verify:authorship
npm run prepack
npm run publish:dry-run

If you find a security problem in this package or in a generated scaffold, please report it privately to the maintainer before public disclosure.