diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish.yml
similarity index 88%
rename from .github/workflows/publish-to-pypi.yml
rename to .github/workflows/publish.yml
index 3bfb03f..b0d4691 100644
--- a/.github/workflows/publish-to-pypi.yml
+++ b/.github/workflows/publish.yml
@@ -1,4 +1,4 @@
-name: Publish to PyPI
+name: Publish to PyPI & NPM
 
 on:
   release:
@@ -40,7 +40,10 @@ jobs:
           path: npm-dist/
       - name: Publish to npm
         run: |
-          npm publish npm-dist/*.tgz --access public
+          pushd npm-dist
+          FILE=$(echo *.tgz)
+          npm publish "$FILE" --provenance --access public
+          popd
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         shell: bash
\ No newline at end of file