Apply suggestions from code review

Co-authored-by: gabalafou <[email protected]>

.github/workflows/release.yml

@@ -80,6 +80,11 @@ jobs:
         with:
           name: conda-store-ui-package
 
+      # Create an attestation with GitHub so others can verify that this particular 
+      # package tarball file was created with this particular GitHub workflow in 
+      # in this particular repository.
+      #
+      # More info: https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds
       - name: "Attest Build Provenance ✨"
         uses: actions/attest-build-provenance@v1
         if: github.repository_owner == 'conda-incubator' && github.event_name == 'release' && startsWith(github.ref, 'refs/tags/')
@@ -108,6 +113,6 @@ jobs:
       - name: "Publish to npm 📤"
         if: github.repository_owner == 'conda-incubator' && github.event_name == 'release' && startsWith(github.ref, 'refs/tags/')
         run: |
-          npm publish --verbose --access public ${{ env.PACKAGE_FILE }} --dry-run
+          npm publish --verbose --access public ${{ env.PACKAGE_FILE }}
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}