v1.0.1

First release published through forgesworn/anvil (OIDC trusted publishing, SLSA
provenance, reproducible-build attestation).

Added

• ./package.json is now an exported subpath, so tooling and
  require('farrier-kit/package.json') resolve.

Changed

• CI actions pinned to commit SHAs, and anvil's action-pin audit runs strict.

---

Reproducible build: byte-identical output verified across two independent CI runners.

Artefact integrity

file:      farrier-kit-1.0.1.tgz
size:      101387 bytes
sha256:    439f4f57c57f5561ef453de90e930e02b7a98e0996807a317ce1f21ca0d29b3d
sha512-4J0xrJZJERsnuntky8ntETt1iFnbaMPguru5jQbIl0//ym/iU6UHJ1t/2Y1zJeS/jvZsNhI2O9kCuRh/YceXSQ==

Verify against the registry tarball:

curl -sLO https://registry.npmjs.org/farrier-kit/-/farrier-kit-1.0.1.tgz
shasum -a 256 farrier-kit-1.0.1.tgz