@jsdevtools/npm-publish 1.4.2 → 2.0.0

package/lib/options.d.ts

@@ -1,73 +1,85 @@
-/// <reference types="node" />
-import { URL } from "url";
+/** The possible access levels for an NPM package */
+export type Access = typeof ACCESS_PUBLIC | typeof ACCESS_RESTRICTED;
+export declare const ACCESS_PUBLIC = "public";
+export declare const ACCESS_RESTRICTED = "restricted";
 /**
- * Options that determine how/whether the package is published.
+ * Version check strategy.
+ *
+ * - `upgrade`: the package will only be published if its version is higher than
+ *   the existing version on the configured tag.
+ * - `all`: the package will be published if its version is not yet published,
+ *   even if its lower that the existing tag.
  */
+export type Strategy = typeof STRATEGY_UPGRADE | typeof STRATEGY_ALL;
+export declare const STRATEGY_UPGRADE = "upgrade";
+export declare const STRATEGY_ALL = "all";
+/** An interface that can be used to log messages. */
+export interface Logger {
+    error: (message: string | Error) => void;
+    info?: undefined | ((message: string) => void);
+    debug?: undefined | ((message: string) => void);
+}
+/** Options that determine how/whether the package is published. */
 export interface Options {
+    /** The NPM access token to use when publishing. */
+    token: string;
     /**
-     * The NPM access token to use when publishing
+     * The absolute or relative path of your package.
+     *
+     * Defaults to the package in the current working directory.
      */
-    token?: string;
+    package?: string | undefined;
     /**
      * The NPM registry URL to use.
      *
-     * Defaults to "https://registry.npmjs.org/"
-     */
-    registry?: string | URL;
-    /**
-     * The absolute or relative path of your package.json file.
+     * Defaults to "https://registry.npmjs.org/".
      *
-     * Defaults to "./package.json"
+     * Can be overridden by the package.json's `publishConfig` field.
      */
-    package?: string;
+    registry?: string | URL | undefined;
     /**
-     * The tag to publish to. This allows people to install the package
-     * using "npm install <package-name>@<tag>".
+     * The tag to publish to.
      *
-     * Defaults to "latest"
-     */
-    tag?: string;
-    /**
-     * Determines whether the published package should be publicly visible,
-     * or restricted to members of your NPM organization. This only applies
-     * to scoped packages.
+     * Defaults to "latest".
      *
-     * Defaults to "restricted" for scoped packages and "public" for non-scoped packages.
+     * Can be overridden by the package.json's `publishConfig` field.
      */
-    access?: Access;
+    tag?: string | undefined;
     /**
-     * If true, run npm publish with the --dry-run flag
-     * so that the package is not published. Used for
-     * testing workflows.
+     * Package access.
+     *
+     * Determines whether the published package should be publicly visible, or
+     * restricted to members of your NPM organization. This only applies to scoped
+     * packages.
      *
-     * Defaults to `false`
+     * Defaults to "restricted" for scoped packages, unless that package has been
+     * previously published as `public`
+     *
+     * Can be overridden by the package.json's `publishConfig` field.
      */
-    dryRun?: boolean;
+    access?: Access | undefined;
     /**
-     * Only publish the package if the version number in package.json
-     * differs from the latest on NPM.
+     * Version check strategy.
+     *
+     * If "upgrade" (default), the package will only be published if its version
+     * is higher than the existing version on the configured tag. If "always", the
+     * package will be published if its version is simply not yet published.
      *
-     * Defaults to `true`
+     * Defaults to `upgrade`.
      */
-    checkVersion?: boolean;
+    strategy?: Strategy | undefined;
     /**
-     * Suppress console output from NPM and npm-publish.
+     * Pretend to publish, but don't actually upload to the registry.
      *
-     * Defaults to `false`
+     * Defaults to `false`.
      */
-    quiet?: boolean;
+    dryRun?: boolean | undefined;
+    /** Optional logger. */
+    logger?: Logger | undefined;
     /**
-     * A function to call to log debug messages.
+     * Temporary directory.
      *
-     * Defaults to a no-op function
+     * Defaults to os.tmpdir()
      */
-    debug?: Debug;
+    temporaryDirectory?: string | undefined;
 }
-/**
- * The possible access levels for an NPM package
- */
-export declare type Access = "public" | "restricted";
-/**
- * A function that receives debug messages
- */
-export declare type Debug = (message: string, data?: object) => void;

package/lib/options.js

@@ -1,3 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.STRATEGY_ALL = exports.STRATEGY_UPGRADE = exports.ACCESS_RESTRICTED = exports.ACCESS_PUBLIC = void 0;
+exports.ACCESS_PUBLIC = "public";
+exports.ACCESS_RESTRICTED = "restricted";
+exports.STRATEGY_UPGRADE = "upgrade";
+exports.STRATEGY_ALL = "all";
 //# sourceMappingURL=options.js.map

package/lib/options.js.map

@@ -1 +1 @@
-{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":""}
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":";;;AAEa,QAAA,aAAa,GAAG,QAAQ,CAAC;AACzB,QAAA,iBAAiB,GAAG,YAAY,CAAC;AAWjC,QAAA,gBAAgB,GAAG,SAAS,CAAC;AAC7B,QAAA,YAAY,GAAG,KAAK,CAAC"}

package/lib/read-manifest.d.ts

@@ -1 +1,25 @@
-export {};
+/** The result of reading a package manifest */
+export interface ManifestReadResult {
+    packageSpec: string;
+    manifest: PackageManifest;
+}
+/** A package manifest (package.json) */
+export interface PackageManifest {
+    name: string;
+    version: string;
+    scope: string | undefined;
+    publishConfig: PackagePublishConfig | undefined;
+}
+/** Any publish configuration defined in package.json. */
+export interface PackagePublishConfig {
+    tag?: string;
+    access?: string;
+    registry?: string;
+}
+/**
+ * Reads the package manifest (package.json) and returns its parsed contents.
+ *
+ * @param packagePath The path to the package being published.
+ * @returns The parsed package metadata.
+ */
+export declare function readManifest(packagePath: unknown): Promise<ManifestReadResult>;

package/lib/read-manifest.js

@@ -1,38 +1,135 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.readManifest = void 0;
-const ono_1 = require("@jsdevtools/ono");
-const fs_1 = require("fs");
-const path_1 = require("path");
+const promises_1 = __importDefault(require("node:fs/promises"));
+const node_path_1 = __importDefault(require("node:path"));
 const semver_1 = require("semver");
-/**
- * Reads the package manifest (package.json) and returns its parsed contents
- * @internal
- */
-async function readManifest(path, debug) {
-    debug && debug(`Reading package manifest from ${path_1.resolve(path)}`);
-    let json;
+const tar_1 = require("tar");
+const errors = __importStar(require("./errors.js"));
+const SCOPE_RE = /^(@.+)\/.+$/u;
+const MANIFEST_BASENAME = "package.json";
+const TARBALL_EXTNAME = ".tgz";
+const isManifest = (file) => {
+    return typeof file === "string" && node_path_1.default.basename(file) === MANIFEST_BASENAME;
+};
+const isDirectory = (file) => {
+    return typeof file === "string" && node_path_1.default.extname(file) === "";
+};
+const isTarball = (file) => {
+    return typeof file === "string" && node_path_1.default.extname(file) === TARBALL_EXTNAME;
+};
+const isVersion = (version) => {
+    return (0, semver_1.valid)(version) !== null;
+};
+const readPackageJson = async (...pathSegments) => {
+    const file = node_path_1.default.resolve(...pathSegments);
     try {
-        json = await fs_1.promises.readFile(path, "utf-8");
+        return await promises_1.default.readFile(file, "utf8");
     }
     catch (error) {
-        throw ono_1.ono(error, `Unable to read ${path}`);
+        throw new errors.PackageJsonReadError(file, error);
     }
+};
+const readTarballPackageJson = async (file) => {
+    const data = [];
+    const onentry = (entry) => {
+        if (entry.path === "package/package.json") {
+            entry.on("data", (chunk) => data.push(chunk));
+        }
+    };
     try {
-        let { name, version } = JSON.parse(json);
-        if (typeof name !== "string" || name.trim().length === 0) {
-            throw new TypeError("Invalid package name");
+        await (0, tar_1.list)({ file, onentry });
+        if (data.length === 0) {
+            throw new Error("package.json not found inside archive");
         }
-        let manifest = {
-            name,
-            version: new semver_1.SemVer(version),
-        };
-        debug && debug("MANIFEST:", manifest);
-        return manifest;
     }
     catch (error) {
-        throw ono_1.ono(error, `Unable to parse ${path}`);
+        throw new errors.PackageTarballReadError(file, error);
+    }
+    return Buffer.concat(data).toString();
+};
+/**
+ * Reads the package manifest (package.json) and returns its parsed contents.
+ *
+ * @param packagePath The path to the package being published.
+ * @returns The parsed package metadata.
+ */
+async function readManifest(packagePath) {
+    let packageSpec;
+    let manifestContents;
+    if (!packagePath) {
+        packageSpec = "";
+        manifestContents = await readPackageJson(MANIFEST_BASENAME);
+    }
+    else if (isManifest(packagePath)) {
+        packageSpec = node_path_1.default.resolve(node_path_1.default.dirname(packagePath));
+        manifestContents = await readPackageJson(packagePath);
+    }
+    else if (isDirectory(packagePath)) {
+        packageSpec = node_path_1.default.resolve(packagePath);
+        manifestContents = await readPackageJson(packagePath, MANIFEST_BASENAME);
+    }
+    else if (isTarball(packagePath)) {
+        packageSpec = node_path_1.default.resolve(packagePath);
+        manifestContents = await readTarballPackageJson(packageSpec);
+    }
+    else {
+        throw new errors.InvalidPackageError(packagePath);
+    }
+    let manifestJson;
+    let name;
+    let version;
+    let publishConfig;
+    try {
+        manifestJson = JSON.parse(manifestContents);
+        name = manifestJson["name"];
+        version = manifestJson["version"];
+        publishConfig = manifestJson["publishConfig"] ?? {};
+    }
+    catch (error) {
+        throw new errors.PackageJsonParseError(packageSpec, error);
+    }
+    if (typeof name !== "string" || name.length === 0) {
+        throw new errors.InvalidPackageNameError(name);
+    }
+    if (!isVersion(version)) {
+        throw new errors.InvalidPackageVersionError(version);
+    }
+    if (typeof publishConfig !== "object" ||
+        Array.isArray(publishConfig) ||
+        !publishConfig) {
+        throw new errors.InvalidPackagePublishConfigError(publishConfig);
     }
+    return {
+        packageSpec,
+        manifest: { name, version, publishConfig, scope: SCOPE_RE.exec(name)?.[1] },
+    };
 }
 exports.readManifest = readManifest;
 //# sourceMappingURL=read-manifest.js.map

package/lib/read-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"read-manifest.js","sourceRoot":"","sources":["../src/read-manifest.ts"],"names":[],"mappings":";;;AAAA,yCAAsC;AACtC,2BAAoC;AACpC,+BAA+B;AAC/B,mCAAgC;AAYhC;;;GAGG;AACI,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAa;IAC5D,KAAK,IAAI,KAAK,CAAC,iCAAiC,cAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,IAAI,IAAY,CAAC;IAEjB,IAAI;QACF,IAAI,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;KACzC;IACD,OAAO,KAAK,EAAE;QACZ,MAAM,SAAG,CAAC,KAAK,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC;KAC5C;IAED,IAAI;QACF,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QAEpE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE;YACxD,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;SAC7C;QAED,IAAI,QAAQ,GAAa;YACvB,IAAI;YACJ,OAAO,EAAE,IAAI,eAAM,CAAC,OAAiB,CAAC;SACvC,CAAC;QAEF,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;KACjB;IACD,OAAO,KAAK,EAAE;QACZ,MAAM,SAAG,CAAC,KAAK,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;KAC7C;AACH,CAAC;AA7BD,oCA6BC"}
+{"version":3,"file":"read-manifest.js","sourceRoot":"","sources":["../src/read-manifest.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,gEAAkC;AAClC,0DAA6B;AAC7B,mCAA8C;AAC9C,6BAAsD;AAEtD,oDAAsC;AAuBtC,MAAM,QAAQ,GAAG,cAAc,CAAC;AAEhC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,MAAM,UAAU,GAAG,CAAC,IAAa,EAAkB,EAAE;IACnD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,iBAAiB,CAAC;AAC/E,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,IAAa,EAAkB,EAAE;IACpD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,IAAa,EAAkB,EAAE;IAClD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,eAAe,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,OAAgB,EAAqB,EAAE;IACxD,OAAO,IAAA,cAAW,EAAC,OAAiB,CAAC,KAAK,IAAI,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,KAAK,EAAE,GAAG,YAAsB,EAAmB,EAAE;IAC3E,MAAM,IAAI,GAAG,mBAAI,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;IAE3C,IAAI;QACF,OAAO,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;KACxC;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KACpD;AACH,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,KAAK,EAAE,IAAY,EAAmB,EAAE;IACrE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAE,EAAE;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE;YACzC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;SAC/C;IACH,CAAC,CAAC;IAEF,IAAI;QACF,MAAM,IAAA,UAAO,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;SAC1D;KACF;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,MAAM,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KACvD;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAChC,WAAoB;IAEpB,IAAI,WAA+B,CAAC;IACpC,IAAI,gBAAwB,CAAC;IAE7B,IAAI,CAAC,WAAW,EAAE;QAChB,WAAW,GAAG,EAAE,CAAC;QACjB,gBAAgB,GAAG,MAAM,eAAe,CAAC,iBAAiB,CAAC,CAAC;KAC7D;SAAM,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE;QAClC,WAAW,GAAG,mBAAI,CAAC,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACtD,gBAAgB,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;KACvD;SAAM,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE;QACnC,WAAW,GAAG,mBAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxC,gBAAgB,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;KAC1E;SAAM,IAAI,SAAS,CAAC,WAAW,CAAC,EAAE;QACjC,WAAW,GAAG,mBAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxC,gBAAgB,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;KAC9D;SAAM;QACL,MAAM,IAAI,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;KACnD;IAED,IAAI,YAAqC,CAAC;IAC1C,IAAI,IAAa,CAAC;IAClB,IAAI,OAAgB,CAAC;IACrB,IAAI,aAAsB,CAAC;IAE3B,IAAI;QACF,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAA4B,CAAC;QACvE,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAClC,aAAa,GAAG,YAAY,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;KACrD;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,MAAM,CAAC,qBAAqB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;KAC5D;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;QACjD,MAAM,IAAI,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;KAChD;IAED,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;QACvB,MAAM,IAAI,MAAM,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;KACtD;IAED,IACE,OAAO,aAAa,KAAK,QAAQ;QACjC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAC5B,CAAC,aAAa,EACd;QACA,MAAM,IAAI,MAAM,CAAC,gCAAgC,CAAC,aAAa,CAAC,CAAC;KAClE;IAED,OAAO;QACL,WAAW;QACX,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;KAC5E,CAAC;AACJ,CAAC;AAxDD,oCAwDC"}

package/lib/results.d.ts

@@ -1,37 +1,35 @@
-import { ReleaseType } from "semver";
-import { Access } from "./options";
-export { ReleaseType };
-/**
- * Results of the publish
- */
+import type { Access, Strategy } from "./options.js";
+import type { ReleaseType } from "./compare-versions.js";
+/** Results of the publish */
 export interface Results {
     /**
-     * The type of version change that occurred
-     */
-    type: ReleaseType | "none";
-    /**
-     * The name of the NPM package that was published
-     */
-    package: string;
-    /**
-     * The version that was published
+     * The identifier of the published package, if published. Format is
+     * `${packageName}@${version}`
      */
+    id: string | undefined;
+    /** The name of the NPM package that was published */
+    name: string;
+    /** The version that was published */
     version: string;
-    /**
-     * The version number that was previously published to NPM
-     */
-    oldVersion: string;
-    /**
-     * The tag that the package was published to.
-     */
+    /** The type of version change that occurred, if any. */
+    type: ReleaseType | undefined;
+    /** The version number that was previously published to NPM, if any. */
+    oldVersion: string | undefined;
+    /** The registry where the package was published */
+    registry: URL;
+    /** The tag that the package was published to. */
     tag: string;
     /**
-     * Indicates whether the published package is publicly visible
-     * or restricted to members of your NPM organization.
-     */
-    access: Access;
-    /**
-     * Whether this was a dry run (not published to NPM)
+     * Indicates whether the published package is publicly visible or restricted
+     * to members of your NPM organization.
+     *
+     * If package is scoped, undefined means npm's scoped package defaults. If a
+     * scoped package has previously been published as public, the default is
+     * public. Otherwise, it is restricted.
      */
+    access: Access | undefined;
+    /** Version check strategy used. */
+    strategy: Strategy;
+    /** Whether this was a dry run (not published to NPM) */
     dryRun: boolean;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@jsdevtools/npm-publish",
   "description": "Fast, easy publishing to NPM",
-  "version": "1.4.2",
+  "version": "2.0.0",
   "keywords": [
     "github-action",
     "npm",
@@ -26,49 +26,57 @@
   },
   "files": [
     "bin",
-    "lib"
+    "lib",
+    "src",
+    "!__tests__"
   ],
   "scripts": {
-    "clean": "shx rm -rf .nyc_output coverage lib dist",
-    "lint": "eslint src test",
-    "build": "npm run build:typescript && npm run build:ncc && npm run build:node_modules",
-    "build:typescript": "tsc --declaration",
-    "build:ncc": "ncc build src/action/index.ts --source-map --external semver",
-    "build:node_modules": "shx mkdir -p dist/node_modules && shx cp -r node_modules/semver dist/node_modules",
-    "watch": "tsc --watch",
-    "test": "mocha && npm run lint",
-    "coverage": "nyc -x test -x dist/sourcemap-register.js node_modules/mocha/bin/mocha",
-    "upgrade": "npm-check -u && npm audit fix",
-    "bump": "bump --tag --push --all && git tag -afm v1 v1 && git push --tags --force",
-    "release": "npm run upgrade && npm run clean && npm run build && npm test && npm run bump"
+    "all": "npm run clean && npm run build && npm run lint && npm run coverage",
+    "clean": "rimraf coverage lib dist e2e/fixture *.tgz",
+    "lint": "npm run _eslint && npm run _prettier -- --check",
+    "format": "npm run _eslint -- --fix && npm run _prettier -- --write",
+    "build": "concurrently -g npm:build:*",
+    "build:dist": "esbuild src/action/main.ts --bundle --sourcemap --outdir=dist --platform=node --target=node16",
+    "build:lib": "tsc",
+    "test": "vitest",
+    "coverage": "vitest run --coverage",
+    "_eslint": "eslint \"**/*.@(js|ts)\"",
+    "_prettier": "prettier \"**/*.@(js|ts|json|md|yml)\""
   },
   "engines": {
-    "node": ">=10"
+    "node": ">=16"
   },
   "devDependencies": {
-    "@actions/core": "^1.2.6",
-    "@jsdevtools/chai-exec": "^2.1.1",
-    "@jsdevtools/eslint-config": "^1.1.4",
-    "@jsdevtools/version-bump-prompt": "^6.1.0",
-    "@types/chai": "^4.2.14",
+    "@actions/core": "^1.10.0",
     "@types/command-line-args": "^5.0.0",
-    "@types/mocha": "^8.2.0",
-    "@types/node": "^14.14.19",
-    "@types/semver": "^7.3.4",
-    "@types/source-map-support": "^0.5.3",
-    "@zeit/ncc": "^0.22.3",
-    "chai": "^4.2.0",
-    "eslint": "^7.17.0",
-    "mocha": "^8.2.1",
-    "npm-check": "^5.9.0",
-    "nyc": "^15.1.0",
-    "shx": "^0.3.3",
-    "typescript": "^4.1.3"
+    "@types/node": "^18.15.11",
+    "@types/tar": "^6.1.4",
+    "@typescript-eslint/eslint-plugin": "^5.59.0",
+    "@typescript-eslint/parser": "^5.59.0",
+    "@vitest/coverage-istanbul": "^0.30.1",
+    "concurrently": "^8.0.1",
+    "esbuild": "0.17.17",
+    "eslint": "^8.38.0",
+    "eslint-config-prettier": "^8.8.0",
+    "eslint-import-resolver-typescript": "^3.5.5",
+    "eslint-plugin-import": "npm:eslint-plugin-i@^2.27.5-1",
+    "eslint-plugin-jsdoc": "^43.0.6",
+    "eslint-plugin-n": "^15.7.0",
+    "eslint-plugin-promise": "^6.1.1",
+    "eslint-plugin-sonarjs": "^0.19.0",
+    "eslint-plugin-unicorn": "^46.0.0",
+    "prettier": "^2.8.7",
+    "prettier-plugin-jsdoc": "^0.4.2",
+    "rimraf": "^5.0.0",
+    "testdouble": "^3.17.2",
+    "testdouble-vitest": "^0.1.2",
+    "typescript": "^5.0.4",
+    "vitest": "^0.30.1"
   },
   "dependencies": {
-    "@jsdevtools/ez-spawn": "^3.0.4",
-    "@jsdevtools/ono": "^7.1.3",
+    "@types/semver": "^7.3.13",
     "command-line-args": "^5.1.1",
-    "semver": "^7.3.4"
+    "semver": "^7.5.0",
+    "tar": "^6.1.13"
   }
 }

package/src/action/core.ts

@@ -0,0 +1,91 @@
+/** Wrapper module for @actions/core */
+import {
+  getInput as ghGetInput,
+  setOutput as ghSetOutput,
+  setSecret as ghSetSecret,
+  setFailed as ghSetFailed,
+  debug as ghLogDebug,
+  info as ghLogInfo,
+  error as ghLogError,
+} from "@actions/core";
+
+import type { Logger } from "../options.js";
+
+/** Logger using the methods from @actions/core. */
+export const logger: Logger = {
+  debug: ghLogDebug,
+  info: ghLogInfo,
+  error: ghLogError,
+};
+
+/**
+ * Get input by name.
+ *
+ * @param name Input name
+ * @returns The input string value, or undefined if not set
+ */
+export function getInput<T extends string>(name: string): T | undefined {
+  const inputString = ghGetInput(name);
+  return inputString.length > 0 ? (inputString as T) : undefined;
+}
+
+/**
+ * Get a required secret input by name.
+ *
+ * @param name Input name
+ * @returns The input secret value.
+ */
+export function getRequiredSecretInput(name: string): string {
+  const inputString = ghGetInput(name, { required: true });
+  ghSetSecret(inputString);
+  return inputString;
+}
+
+/**
+ * Get a boolean input by name.
+ *
+ * @param name Input name
+ * @returns True if value is "true", false if not
+ */
+export function getBooleanInput(name: string): boolean {
+  return ghGetInput(name) === "true";
+}
+
+/**
+ * Set the action as failed due to an error.
+ *
+ * @param error An value from a `catch`
+ */
+export function setFailed(error: unknown) {
+  ghSetFailed(error as Error);
+}
+
+/**
+ * Set an output by name.
+ *
+ * @param name Output name
+ * @param value Output value
+ */
+export function setOutput(name: string, value: string | boolean): void;
+
+/**
+ * Set an output by name.
+ *
+ * @param name Output name
+ * @param value Output value
+ * @param defaultValue Default value if value is undefined.
+ */
+export function setOutput(
+  name: string,
+  value: string | boolean | undefined,
+  defaultValue: string | boolean
+): void;
+
+// eslint-disable-next-line jsdoc/require-jsdoc
+export function setOutput(
+  name: string,
+  value: string | boolean | undefined,
+  defaultValue?: string | boolean | undefined
+): void {
+  ghSetOutput(name, value ?? defaultValue);
+}

package/src/action/main.ts

@@ -0,0 +1,31 @@
+/** Action entry point */
+import { npmPublish } from "../index.js";
+import * as core from "./core.js";
+
+/** Run the action. */
+async function run(): Promise<void> {
+  const results = await npmPublish({
+    token: core.getRequiredSecretInput("token"),
+    registry: core.getInput("registry"),
+    package: core.getInput("package"),
+    tag: core.getInput("tag"),
+    access: core.getInput("access"),
+    strategy: core.getInput("strategy"),
+    dryRun: core.getBooleanInput("dry-run"),
+    logger: core.logger,
+    temporaryDirectory: process.env["RUNNER_TEMP"],
+  });
+
+  core.setOutput("id", results.id, "");
+  core.setOutput("name", results.name);
+  core.setOutput("version", results.version);
+  core.setOutput("type", results.type, "");
+  core.setOutput("old-version", results.oldVersion, "");
+  core.setOutput("registry", results.registry.href);
+  core.setOutput("tag", results.tag);
+  core.setOutput("access", results.access, "default");
+  core.setOutput("strategy", results.strategy);
+  core.setOutput("dry-run", results.dryRun);
+}
+
+run().catch((error: Error) => core.setFailed(error));