feat: prompt trusted publisher

README.md

@@ -8,6 +8,14 @@
 
 _description_
 
+## Note for Developers
+
+This starter recommands using [npm Trusted Publisher](https://github.com/e18e/ecosystem-issues/issues/201), where the release is done on CI to ensure the security of the packages.
+
+To do so, you need to run `pnpm publish` manually for the very first time to create the package on npm, and then go to `https://www.npmjs.com/package/<your-package-name>/access` to set the connection to your GitHub repo.
+
+Then for the future releases, you can run `pnpm run release` to do the release and the GitHub Actions will take care of the release process.
+
 ## Sponsors
 
 <p align="center">