diff --git a/crates/node_binding/package.json b/crates/node_binding/package.json
index f9bc6c6b691..c41690630e6 100644
--- a/crates/node_binding/package.json
+++ b/crates/node_binding/package.json
@@ -6,7 +6,8 @@
   "main": "binding.js",
   "types": "binding.d.ts",
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "binding.js",
diff --git a/npm/darwin-arm64/package.json b/npm/darwin-arm64/package.json
index 61acf7bfa84..84b6846432f 100644
--- a/npm/darwin-arm64/package.json
+++ b/npm/darwin-arm64/package.json
@@ -11,7 +11,8 @@
     "url": "https://github.com/web-infra-dev/rspack"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "rspack.darwin-arm64.node"
diff --git a/npm/darwin-x64/package.json b/npm/darwin-x64/package.json
index 357be262187..cd47c388d60 100644
--- a/npm/darwin-x64/package.json
+++ b/npm/darwin-x64/package.json
@@ -11,7 +11,8 @@
     "url": "https://github.com/web-infra-dev/rspack"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "rspack.darwin-x64.node"
diff --git a/npm/linux-x64-gnu/package.json b/npm/linux-x64-gnu/package.json
index 0e3b59ae189..539cde411b7 100644
--- a/npm/linux-x64-gnu/package.json
+++ b/npm/linux-x64-gnu/package.json
@@ -11,7 +11,8 @@
     "url": "https://github.com/web-infra-dev/rspack"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "rspack.linux-x64-gnu.node"
diff --git a/npm/win32-x64-msvc/package.json b/npm/win32-x64-msvc/package.json
index 6d84b0aae0d..cc6797dcb06 100644
--- a/npm/win32-x64-msvc/package.json
+++ b/npm/win32-x64-msvc/package.json
@@ -11,7 +11,8 @@
     "url": "https://github.com/web-infra-dev/rspack"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "rspack.win32-x64-msvc.node"
diff --git a/packages/create-rspack/package.json b/packages/create-rspack/package.json
index 653af3aeb65..4f7d462e516 100644
--- a/packages/create-rspack/package.json
+++ b/packages/create-rspack/package.json
@@ -6,6 +6,10 @@
   "bin": {
     "create-rspack": "index.js"
   },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "homepage": "https://rspack.dev",
   "bugs": "https://github.com/web-infra-dev/rspack/issues",
   "repository": {
diff --git a/packages/rspack-cli/package.json b/packages/rspack-cli/package.json
index 7a9f2df7f7f..98102b243e0 100644
--- a/packages/rspack-cli/package.json
+++ b/packages/rspack-cli/package.json
@@ -3,6 +3,10 @@
   "version": "0.7.4",
   "license": "MIT",
   "description": "CLI for rspack",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "bin": {
     "rspack": "./bin/rspack"
   },
diff --git a/packages/rspack-dev-server/package.json b/packages/rspack-dev-server/package.json
index bc7a8d018f7..d5efca5181e 100644
--- a/packages/rspack-dev-server/package.json
+++ b/packages/rspack-dev-server/package.json
@@ -5,6 +5,10 @@
   "description": "Development server for rspack",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "exports": {
     ".": {
       "default": "./dist/index.js"
diff --git a/packages/rspack-plugin-minify/package.json b/packages/rspack-plugin-minify/package.json
index 72541636631..245a55e0ad5 100644
--- a/packages/rspack-plugin-minify/package.json
+++ b/packages/rspack-plugin-minify/package.json
@@ -22,7 +22,8 @@
     "directory": "packages/rspack-plugin-minify"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "dependencies": {
     "esbuild": "0.16.3",
diff --git a/packages/rspack-plugin-preact-refresh/package.json b/packages/rspack-plugin-preact-refresh/package.json
index 1d5f820ede6..3e67985fd72 100644
--- a/packages/rspack-plugin-preact-refresh/package.json
+++ b/packages/rspack-plugin-preact-refresh/package.json
@@ -25,7 +25,8 @@
     "dist"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "homepage": "https://rspack.dev",
   "bugs": "https://github.com/web-infra-dev/rspack/issues",
diff --git a/packages/rspack-plugin-react-refresh/package.json b/packages/rspack-plugin-react-refresh/package.json
index 3ed9e3b484b..abb02e7c40f 100644
--- a/packages/rspack-plugin-react-refresh/package.json
+++ b/packages/rspack-plugin-react-refresh/package.json
@@ -25,7 +25,8 @@
     "dist"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "homepage": "https://rspack.dev",
   "bugs": "https://github.com/web-infra-dev/rspack/issues",
diff --git a/packages/rspack-test-tools/package.json b/packages/rspack-test-tools/package.json
index 66a992532d8..0b50825405d 100644
--- a/packages/rspack-test-tools/package.json
+++ b/packages/rspack-test-tools/package.json
@@ -33,7 +33,8 @@
     "jest.d.ts"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "homepage": "https://rspack.dev",
   "bugs": "https://github.com/web-infra-dev/rspack/issues",
diff --git a/packages/rspack/package.json b/packages/rspack/package.json
index 57425d65219..79d4f8adba8 100644
--- a/packages/rspack/package.json
+++ b/packages/rspack/package.json
@@ -6,6 +6,10 @@
   "description": "The fast Rust-based web bundler with webpack-compatible API",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "exports": {
     ".": {
       "default": "./dist/index.js"