Generate provenance statements

[diego-betto]

Hi,

I'm using @lirantal npq security tool and I've noticed that the provenance statement is not available for this package.

Provenance is an interesting feature which can increase supply-chain security for your packages.
"This allows you to publicly establish where a package was built and who published a package"

Ref and guide: https://docs.npmjs.com/generating-provenance-statements

I think can be usefull in today's security scenarios.