npm Trusted Publishing
SkillMoves your GitHub Actions npm release to OIDC trusted publishing and drops the NPM_TOKEN secret.
by GitHub Listed Jun 11, 2025
Clone or download it from github.com, then drop the folder into ~/.claude/skills/ (Claude Code) or your agent's skills directory.
Product badge
Share this product's name and rating in your README or on your website.
Updates may be delayed by image caching.
About npm Trusted Publishing
Sets up or repairs npm trusted publishing in GitHub Actions so you can delete long-lived publish tokens. It also decodes the confusing errors a half-done migration produces (ENEEDAUTH, E404 on PUT, E422 repository.url).
Timely, since 2FA-bypass tokens stop working for publishing in January 2027. From github/awesome-copilot.
No reviews yet
Used it? Write the first review.