diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7a42a1aa..ccf2016d 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -40,12 +40,12 @@ jobs:
           if git log -1 --pretty=%B | grep "^release: [0-9]\+\.[0-9]\+\.[0-9]\+$";
           then
             cd dist
-            npm publish --provenance --access public
+            pnpm publish --provenance --access public
             cd ..
           elif git log -1 --pretty=%B | grep "^release: [0-9]\+\.[0-9]\+\.[0-9]\+";
           then
             cd dist
-            npm publish --tag next --provenance --access public
+            pnpm publish --tag next --provenance --access public
             cd ..
           else
             echo "Not a release, skipping publish"
@@ -54,3 +54,4 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
diff --git a/package.json b/package.json
index 762a245f..fc065c7e 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
     "lint": "eslint --format=sukka .",
     "build": "rollup -c rollup.config.ts --configPlugin swc3 --bundleConfigAsCjs",
     "postbuild": "node -r @swc-node/register tools/postbuild.ts",
-    "prepublishOnly": "npm run build && echo \"This package is not meant to be published from root dir.\" && exit 1"
+    "prepublishOnly": "npm run build"
   },
   "keywords": [
     "React",