js-devtools/npm-publish@v1 is not allowed to be used in IBM/jupyterlab-s3-browser. Actions in this workflow must be: within a repository owned by IBM, created by GitHub, verified in the GitHub Marketplace, or matching the following: julia-actions/*, softprops/action-gh-release@*, JuliaRegistries/TagBot@*, helm/*, golangci/golangci-lint-action@*, pypa/*, fkirc/skip-duplicate-actions@*, codespell-project/actions-codespell@v1, gaurav-nelson/github-action-markdown-link-check@v1, crazy-max/ghaction-import-gpg@*, norio-nomura/action-swiftlint@*, maxim-lobanov/setup-xcode@*.