@jsdevtools/npm-publish
Fast, easy publishing to NPM
30
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
jonlucajamesmessingerphilsturgeonmcous
Keywords
github-actionnpmpublishversionbump
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:env-spread | AI (semgrep): Spreading process.env into child_process.spawn options is the standard pattern for this npm CLI wrapper tool; it passes env to subprocess, not to external endpoints. Stable false positive for this package. | ai |
Versions (showing 30 of 30)
| Version | Deps | Published |
|---|---|---|
| 4.1.5 | 5 / 19 | |
| 4.1.4 | 5 / 19 | |
| 4.1.3 | 5 / 19 | |
| 4.1.2 | 5 / 19 | |
| 4.1.1 | 5 / 19 | |
| 4.1.0 | 5 / 19 | |
| 4.0.1 | 5 / 19 | |
| 4.0.0 | 5 / 19 | |
| 3.1.1 | 4 / 24 | |
| 3.1.0 | 4 / 24 | |
| 3.0.1 | 4 / 24 | |
| 3.0.0 | 4 / 24 | |
| 2.2.2 | 4 / 24 | |
| 2.2.1 | 4 / 24 | |
| 2.2.0 | 4 / 25 | |
| 2.1.0 | 4 / 25 | |
| 2.0.0 | 4 / 25 | |
| 1.4.3 | 4 / 18 | |
| 1.4.2 | 4 / 18 | |
| 1.4.1 | 4 / 18 | |
| 1.4.0 | 4 / 18 | |
| 1.3.0 | 4 / 18 | |
| 1.2.0 | 4 / 18 | |
| 1.1.2 | 4 / 18 | |
| 1.1.0 | 4 / 21 | |
| 1.0.13 | 4 / 21 | |
| 1.0.12 | 4 / 21 | |
| 1.0.11 | 4 / 21 | |
| 1.0.10 | 0 / 23 | |
| 1.0.9 | 0 / 24 |