diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ee1f4c5..9c51f00 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,6 +11,11 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - uses: actions/checkout@v6
         with:
@@ -24,6 +29,7 @@ jobs:
         uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
+          registry-url: 'https://registry.npmjs.org'
 
       - run: npx changelogithub
         env:
@@ -31,4 +37,6 @@ jobs:
       
       - run: pnpm install
       - run: pnpm build
-      - run: npm publish --ignore-scripts
+      - run: npm publish --ignore-scripts --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/package.json b/package.json
index bec97f3..b9e3482 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,6 @@
 {
   "name": "@ayo-run/mnswpr",
   "version": "0.0.5",
-  "private": true,
   "description": "Classic Minesweeper browser game",
   "author": "Ayo",
   "type": "module",
@@ -9,7 +8,7 @@
     "type": "git",
     "url": "https://github.com/ayoayco/mnswpr"
   },
-  "main": "src/index.js",
+  "main": "dist/mnswpr.js",
   "scripts": {
     "test": "echo \"Warn: no test specified\"",
     "dev": "vite",
@@ -22,7 +21,8 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "LICENSE"
   ],
   "license": "BSD-2-Clause",
   "devDependencies": {