diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e39e804..479a97f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -38,10 +38,12 @@ jobs:
       - name: Run CI checks
         run: pnpm run ci
 
+      - name: Verify dependency signatures
+        run: npm audit signatures
+
       - name: Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           GIT_AUTHOR_NAME: github-actions[bot]
           GIT_AUTHOR_EMAIL: github-actions[bot]@users.noreply.github.com
           GIT_COMMITTER_NAME: github-actions[bot]
diff --git a/packages/haystack/package.json b/packages/haystack/package.json
index 5b6d2ab..9d19c0f 100644
--- a/packages/haystack/package.json
+++ b/packages/haystack/package.json
@@ -40,7 +40,8 @@
   },
   "types": "./dist/index.d.mts",
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "engines": {
     "node": ">=20"