palveron 0.0.1

package/README.md

@@ -0,0 +1,28 @@
+# palveron
+
+**This is a holding package.** This name belongs to Palveron and is held only so that nobody else can claim it. It will never carry functionality.
+
+Running it prints a message to stderr and exits with code 1. Nothing else happens.
+
+## Why this name is held
+
+The help output and documentation of @palveron/agent-shield version 0.1.0 showed commands of the form "npx palveron shield init". That form was wrong: "palveron" is the bin inside @palveron/agent-shield, not a package of its own, so npx asks the registry for a package called "palveron", and until now no such package existed.
+
+## What to use instead
+
+Install the real package and run the real command:
+
+```
+npm install -g @palveron/agent-shield
+palveron shield init
+```
+
+Without a global install, the -p flag points npx at the right package:
+
+```
+npx -p @palveron/agent-shield palveron shield init
+```
+
+Documentation: https://docs.palveron.com
+
+Source of this holding package: https://github.com/palveron/npm-name-locks

package/bin/lock.mjs

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+// palveron: holding package. Refuses loudly and names the right way.
+// Message goes to stderr, never stdout, and the process ends with exit code 1
+// on every run, unconditionally. An agent or shell that ran this by mistake
+// must see a failure, not a success with a note attached.
+import { writeSync } from 'node:fs';
+
+const MESSAGE = [
+  "palveron is a holding package. This name belongs to Palveron and is held only so that nobody else can claim it. It will never carry functionality.",
+  "",
+  "Why this name is held: The help output and documentation of @palveron/agent-shield version 0.1.0 showed commands of the form \"npx palveron shield init\". That form was wrong: \"palveron\" is the bin inside @palveron/agent-shield, not a package of its own, so npx asks the registry for a package called \"palveron\", and until now no such package existed.",
+  "",
+  "Install the real package and run the real command:",
+  "  npm install -g @palveron/agent-shield",
+  "  palveron shield init",
+  "Without a global install, the -p flag points npx at the right package:",
+  "  npx -p @palveron/agent-shield palveron shield init",
+  "",
+  "Documentation: https://docs.palveron.com",
+].join('\n');
+
+writeSync(2, MESSAGE + '\n');
+process.exit(1);

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "palveron",
+  "version": "0.0.1",
+  "description": "Holding package. This name belongs to Palveron and is held only so that nobody else can claim it. It will never carry functionality.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/palveron/npm-name-locks.git",
+    "directory": "packages/palveron"
+  },
+  "homepage": "https://github.com/palveron/npm-name-locks#readme",
+  "bugs": {
+    "url": "https://github.com/palveron/npm-name-locks/issues"
+  },
+  "keywords": [
+    "security-holding-package",
+    "palveron"
+  ],
+  "bin": {
+    "palveron": "bin/lock.mjs"
+  },
+  "files": [
+    "bin",
+    "README.md"
+  ]
+}