skreg-cli 0.1.2 → 0.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +40 -3
- package/npm-shrinkwrap.json +2 -2
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# skreg
|
|
2
2
|
|
|
3
|
-
A package registry for AI coding assistant skills.
|
|
3
|
+
A package registry for AI coding assistant skills, built on cryptographic publisher identity and trust.
|
|
4
4
|
|
|
5
5
|
## What is skreg?
|
|
6
6
|
|
|
@@ -12,13 +12,50 @@ Browse and install community skills from [skreg.ai](https://skreg.ai). Package
|
|
|
12
12
|
your own with a single command and publish them for others to use — or run a
|
|
13
13
|
private registry your team controls.
|
|
14
14
|
|
|
15
|
+
## Trust & Verification
|
|
16
|
+
|
|
17
|
+
Every package published to skreg carries a cryptographic publisher signature. Two verification tiers are supported:
|
|
18
|
+
|
|
19
|
+
| Tier | Badge | How |
|
|
20
|
+
|------|-------|-----|
|
|
21
|
+
| **Self-signed** | `◈ self-signed` | Publisher generated their own key. Key consistency is enforced at the namespace level — once a key is used it cannot be swapped without an explicit rotation. |
|
|
22
|
+
| **CA-verified** | `✦ verified` | Publisher obtained a CA-issued cert from the skreg Publisher CA. Proves organisation identity. |
|
|
23
|
+
|
|
24
|
+
All packages — regardless of tier — pass content, safety, and structure vetting before appearing in search. The registry does not counter-sign packages; only the publisher's key appears in the signature.
|
|
25
|
+
|
|
26
|
+
Key material is stored in `~/.skreg/keys/` with `chmod 700`. Run `skreg certify` to obtain a CA-verified cert. Run `skreg rotate` to safely rotate your namespace's signing key.
|
|
27
|
+
|
|
15
28
|
## Install
|
|
16
29
|
|
|
30
|
+
### Pre-built binary (macOS and Linux)
|
|
31
|
+
|
|
32
|
+
```bash
|
|
33
|
+
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/dymocaptin/skreg/releases/download/v0.1.2/skreg-cli-installer.sh | sh
|
|
34
|
+
```
|
|
35
|
+
|
|
36
|
+
### Homebrew (macOS and Linux)
|
|
37
|
+
|
|
38
|
+
```bash
|
|
39
|
+
brew tap dymocaptin/tap
|
|
40
|
+
brew install skreg-cli
|
|
41
|
+
```
|
|
42
|
+
|
|
43
|
+
### npm
|
|
44
|
+
|
|
45
|
+
```bash
|
|
46
|
+
npm install -g skreg-cli
|
|
47
|
+
```
|
|
48
|
+
|
|
49
|
+
### cargo (build from source)
|
|
50
|
+
|
|
51
|
+
Requires Rust ([rustup.rs](https://rustup.rs)).
|
|
52
|
+
|
|
17
53
|
```bash
|
|
18
|
-
|
|
54
|
+
git clone https://github.com/dymocaptin/skreg.git
|
|
55
|
+
cargo install --path skreg/crates/skreg-cli
|
|
19
56
|
```
|
|
20
57
|
|
|
21
|
-
|
|
58
|
+
After installing with any method, verify with:
|
|
22
59
|
|
|
23
60
|
```bash
|
|
24
61
|
skreg --version
|
package/npm-shrinkwrap.json
CHANGED
|
@@ -23,7 +23,7 @@
|
|
|
23
23
|
"hasInstallScript": true,
|
|
24
24
|
"license": "Apache-2.0",
|
|
25
25
|
"name": "skreg-cli",
|
|
26
|
-
"version": "0.1.
|
|
26
|
+
"version": "0.1.4"
|
|
27
27
|
},
|
|
28
28
|
"node_modules/@isaacs/cliui": {
|
|
29
29
|
"engines": {
|
|
@@ -542,5 +542,5 @@
|
|
|
542
542
|
}
|
|
543
543
|
},
|
|
544
544
|
"requires": true,
|
|
545
|
-
"version": "0.1.
|
|
545
|
+
"version": "0.1.4"
|
|
546
546
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"artifactDownloadUrls": [
|
|
3
|
-
"https://github.com/dymocaptin/skreg/releases/download/v0.1.
|
|
3
|
+
"https://github.com/dymocaptin/skreg/releases/download/v0.1.4"
|
|
4
4
|
],
|
|
5
5
|
"author": "dymocaptin",
|
|
6
6
|
"bin": {
|
|
@@ -86,7 +86,7 @@
|
|
|
86
86
|
"zipExt": ".tar.xz"
|
|
87
87
|
}
|
|
88
88
|
},
|
|
89
|
-
"version": "0.1.
|
|
89
|
+
"version": "0.1.4",
|
|
90
90
|
"volta": {
|
|
91
91
|
"node": "18.14.1",
|
|
92
92
|
"npm": "9.5.0"
|