anvil: forge-hardened npm publishing for JS/TS libraries. Reproducible builds, OIDC trusted publishing, hard pre-publish gates. Pure bash, zero dependencies.
npm provenance release oidc reproducible-builds npm-publish github-actions slsa supply-chain-security trusted-publishing
-
Updated
Apr 12, 2026 - Shell