diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 95b653a..eeb4c6c 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -32,6 +32,6 @@ jobs:
           VERSION=$(node -p "require('./package.json').version")-canary.$(date +%s)
 
           yarn version --new-version $VERSION --no-git-tag-version
-          yarn publish --tag canary
+          yarn publish --tag canary --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/.github/workflows/stable-release.yml b/.github/workflows/stable-release.yml
index 2fb078a..26358bb 100644
--- a/.github/workflows/stable-release.yml
+++ b/.github/workflows/stable-release.yml
@@ -52,7 +52,7 @@ jobs:
           git push origin $VERSION
 
           yarn version --new-version $VERSION
-          yarn publish --tag latest
+          yarn publish --tag latest --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Create GitHub Release
diff --git a/library/package.json b/library/package.json
index 3c9934e..46f7b84 100644
--- a/library/package.json
+++ b/library/package.json
@@ -41,7 +41,8 @@
     "dist"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "scripts": {
     "playground": "bun ./playground.js",