@tanstack/vue-start-server 0.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +45 -0
- package/package.json +10 -0
package/README.md
ADDED
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
# @tanstack/vue-start-server
|
|
2
|
+
|
|
3
|
+
## ⚠️ IMPORTANT NOTICE ⚠️
|
|
4
|
+
|
|
5
|
+
**This package is created solely for the purpose of setting up OIDC (OpenID Connect) trusted publishing with npm.**
|
|
6
|
+
|
|
7
|
+
This is **NOT** a functional package and contains **NO** code or functionality beyond the OIDC setup configuration.
|
|
8
|
+
|
|
9
|
+
## Purpose
|
|
10
|
+
|
|
11
|
+
This package exists to:
|
|
12
|
+
1. Configure OIDC trusted publishing for the package name `@tanstack/vue-start-server`
|
|
13
|
+
2. Enable secure, token-less publishing from CI/CD workflows
|
|
14
|
+
3. Establish provenance for packages published under this name
|
|
15
|
+
|
|
16
|
+
## What is OIDC Trusted Publishing?
|
|
17
|
+
|
|
18
|
+
OIDC trusted publishing allows package maintainers to publish packages directly from their CI/CD workflows without needing to manage npm access tokens. Instead, it uses OpenID Connect to establish trust between the CI/CD provider (like GitHub Actions) and npm.
|
|
19
|
+
|
|
20
|
+
## Setup Instructions
|
|
21
|
+
|
|
22
|
+
To properly configure OIDC trusted publishing for this package:
|
|
23
|
+
|
|
24
|
+
1. Go to [npmjs.com](https://www.npmjs.com/) and navigate to your package settings
|
|
25
|
+
2. Configure the trusted publisher (e.g., GitHub Actions)
|
|
26
|
+
3. Specify the repository and workflow that should be allowed to publish
|
|
27
|
+
4. Use the configured workflow to publish your actual package
|
|
28
|
+
|
|
29
|
+
## DO NOT USE THIS PACKAGE
|
|
30
|
+
|
|
31
|
+
This package is a placeholder for OIDC configuration only. It:
|
|
32
|
+
- Contains no executable code
|
|
33
|
+
- Provides no functionality
|
|
34
|
+
- Should not be installed as a dependency
|
|
35
|
+
- Exists only for administrative purposes
|
|
36
|
+
|
|
37
|
+
## More Information
|
|
38
|
+
|
|
39
|
+
For more details about npm's trusted publishing feature, see:
|
|
40
|
+
- [npm Trusted Publishing Documentation](https://docs.npmjs.com/generating-provenance-statements)
|
|
41
|
+
- [GitHub Actions OIDC Documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
|
|
42
|
+
|
|
43
|
+
---
|
|
44
|
+
|
|
45
|
+
**Maintained for OIDC setup purposes only**
|