Repository navigation
The first release published to npm by CI, through npm trusted publishing and with provenance. 2.1.0 was published by hand to create the packages. Nothing changes for users.
- The npm workflow publishes through OIDC only; no npm token is stored.
scripts/npm-publish.mjsis attached to the terminal, so a manual publish can answer npm's 2FA prompt.- The release checklist covers trusted publishing and how a new plugin package gets its first version.