Top-100 npm package maintainers now require 2FA, and additional security-focused improvements to npm

Starting today, we are rolling out mandatory 2FA to all maintainers of top-100 npm packages by dependents.