When you choose to rotate npm tokens on a regular schedule, you are essentially treating a standing credential as a manageable risk. Getting rid of them entirely, however, completely removes that credential altogether. Our team has documented the exact steps we took to achieve this, along with the various things that broke during our journey. You can read the full story at https://optimism.io/blog/stop-rotating-npm-tokens-delete-them