@trkyshorty/node-lzf 1.2.0 → 1.3.1

package/README.md

@@ -25,8 +25,13 @@ from source via `node-gyp-build` (requires a C++ toolchain).
 
 Prebuilds are produced by the `prebuild` GitHub Actions workflow
 (`npm run prebuild` runs `prebuildify --napi --strip` for the current
-platform). Before `npm publish`, download the merged `prebuilds` artifact
-from the workflow run and place it in the package root as `prebuilds/`.
+platform). Releases are fully automatic: bump `version` in `package.json`
+and push to `master`. If that version is not on npm yet, the workflow builds
+and tests every platform, publishes the package with the merged `prebuilds/`
+via npm trusted publishing (with provenance) and tags the commit
+`v<version>`. Pushes that keep the version publish nothing; a manual run
+always builds and tests. A local `npm publish` is refused (`prepublishOnly`),
+so stale local `prebuilds/` can never reach the registry.
 
 ### Usage
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trkyshorty/node-lzf",
-  "version": "1.2.0",
+  "version": "1.3.1",
   "description": "lzf compression module for nodejs (Topface/node-lzf fork)",
   "keywords": [
     "lzf",
@@ -40,6 +40,7 @@
   ],
   "scripts": {
     "install": "node-gyp-build",
+    "prepublishOnly": "node -e \"if (!process.env.GITHUB_ACTIONS) { console.error('Refusing to publish locally: the prebuild workflow publishes releases. Bump the version and push to master.'); process.exit(1); }\"",
     "prebuild": "prebuildify --napi --strip",
     "test": "node --test test/test.js",
     "bench": "node benchmark/benchmark.js"