@vscodium/os-proxy-resolver-test001 0.0.0-stage → 0.0.0

package/README.md

@@ -1,3 +1,52 @@
-# Temporary Holding Version
+⚠️ Important Notice ⚠️
+----------------------
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**This package is created solely for the purpose of setting up OIDC (OpenID Connect) trusted publishing with npm.**
+
+This is **NOT** a functional package and contains **NO** code or functionality beyond the OIDC setup configuration.
+
+Purpose
+-------
+
+This package exists to:
+
+1. Configure OIDC trusted publishing for the package name `@vscodium/os-proxy-resolver-test001`
+2. Enable secure, token-less publishing from CI/CD workflows
+3. Establish provenance for packages published under this name
+
+What Is OIDC Trusted Publishing?
+--------------------------------
+
+OIDC trusted publishing allows package maintainers to publish packages directly from their CI/CD workflows without needing to manage npm access tokens. Instead, it uses OpenID Connect to establish trust between the CI/CD provider (like GitHub Actions) and npm.
+
+Setup Instructions
+------------------
+
+To properly configure OIDC trusted publishing for this package:
+
+1. Go to [npmjs.com](https://www.npmjs.com/) and navigate to your package settings
+2. Configure the trusted publisher (e.g., GitHub Actions)
+3. Specify the repository and workflow that should be allowed to publish
+4. Use the configured workflow to publish your actual package
+
+Do not Use This Package
+-----------------------
+
+This package is a placeholder for OIDC configuration only. It:
+
+- Contains no executable code
+- Provides no functionality
+- Should not be installed as a dependency
+- Exists only for administrative purposes
+
+More Information
+----------------
+
+For more details about npm's trusted publishing feature, see:
+
+- [npm Trusted Publishing Documentation](https://docs.npmjs.com/generating-provenance-statements)
+- [GitHub Actions OIDC Documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
+
+--------------------
+
+**Maintained for OIDC setup purposes only**

package/package.json

@@ -1,6 +1,5 @@
 {
   "name": "@vscodium/os-proxy-resolver-test001",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.0.0",
+  "description": "OIDC trusted publishing setup package for @vscodium/os-proxy-resolver-test001"
+}