@hraness/sponge 0.1.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +3 -3
  2. package/package.json +6 -2
package/README.md CHANGED
@@ -25,6 +25,6 @@ current behavior. Run `npm run build` in `site/` to verify the website.
25
25
  After a version bump in `package.json` reaches `main` with green CI, the
26
26
  release tagger creates an annotated `v<version>` tag. The release workflow
27
27
  checks that tag against the exact `main` commit, packs and installs the CLI,
28
- then publishes immutable GitHub Release assets. npm publication is prepared for
29
- a trusted publisher tied to this repository's `Release` workflow; it is enabled
30
- only after npm grants the repository authority to publish `@hraness/sponge`.
28
+ then publishes immutable GitHub Release assets. The same verified tarball is
29
+ published to npm through a trusted publisher tied to this repository's
30
+ `Release` workflow. The repository is private, so npm provenance is disabled.
package/package.json CHANGED
@@ -1,7 +1,11 @@
1
1
  {
2
2
  "name": "@hraness/sponge",
3
- "version": "0.1.0",
3
+ "version": "0.1.2",
4
4
  "description": "The future Sponge native app. The CLI is currently inactive.",
5
+ "repository": {
6
+ "type": "git",
7
+ "url": "https://github.com/hraness/sponge.git"
8
+ },
5
9
  "license": "UNLICENSED",
6
10
  "type": "module",
7
11
  "bin": {
@@ -16,7 +20,7 @@
16
20
  },
17
21
  "publishConfig": {
18
22
  "access": "public",
19
- "provenance": true
23
+ "provenance": false
20
24
  },
21
25
  "scripts": {
22
26
  "check": "node --check bin/sponge.js"