Skip to content

v1.3.1: npm trusted publishing

Choose a tag to compare

View all tags
@cryptostrapon cryptostrapon released this 05 Nov 17:48
· 20 commits to main since this release
v1.3.1
cb332cb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

No change to the checks.

  • The package is on npm, so it runs without cloning anything: npx npm-install-audit ./repo.
  • Releases are now published from GitHub Actions through npm trusted publishing (OIDC), with provenance and no stored npm token.
Assets 2
Loading