Skip to content

v0.140.1 — first OIDC-published release

Choose a tag to compare

View all tags
@thezzisu thezzisu released this 04 Jun 07:22
· 63 commits to main since this release
v0.140.1
a11c75e

Wrapper-only patch over 0.140.0. First release published from CI via npm Trusted Publisher (OIDC) — no NPM_TOKEN in repo secrets, SLSA provenance attached and verifiable with `npm audit signatures`.

Verify

```bash
mkdir t && cd t && npm init -y >/dev/null
npm install @thezzisu/droidnode@0.140.1
npm audit signatures

→ "1 package has a verified attestation"

```

Functional change

None. The 0.140.0 publish was a manual local publish that could not generate provenance. droid pin stays at `^0.140.0`.

Copyright

droid, its JS bundle, and `@factory/cli-*` binaries are © Factory AI and not redistributed by this repository. The launcher itself is MIT.

Assets 2
Loading