@releasekit/release
Unified release pipeline: version, changelog, and publish in a single command
29
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
goosewobbler
Keywords
versionsemvergitpackage
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | net-exec-file:dist/chunk-BLLATA3P.js | AI (source-diff): File contains bundled Handlebars and other npm deps via tsup; not malicious dropper code. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by switch to fully bundled dist output via tsup. | ai | |
| source-diff | net-exec-file:dist/chunk-QUY54CTL.js | AI (source-diff): Bundled third-party library code (Handlebars via tsup); not malicious network+exec pattern. | ai | |
| phantom-deps | phantom-dep:@releasekit/config | AI (phantom-deps): Workspace monorepo sibling; declared as dep but may be used transitively — stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:commander | AI (phantom-deps): Bundled CLI via tsup; deps consumed at build time, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Bundled CLI via tsup; deps consumed at build time, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): Bundled CLI via tsup; deps consumed at build time, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:smol-toml | AI (phantom-deps): Bundled CLI via tsup; deps consumed at build time, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@octokit/rest | AI (phantom-deps): Bundled CLI via tsup; deps consumed at build time, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@releasekit/publish | AI (phantom-deps): Same-org sibling dep; likely loaded via CLI dispatcher, not direct import. Stable FP for this package. | ai | |
| phantom-deps | phantom-dep:conventional-changelog-conventionalcommits | AI (phantom-deps): Referenced in config files per finding; stable FP for this changelog tooling package. | ai | |
| phantom-deps | phantom-dep:conventional-changelog-angular | AI (phantom-deps): Referenced in config files per finding; stable FP for this changelog tooling package. | ai | |
| phantom-deps | phantom-dep:@releasekit/notes | AI (phantom-deps): Same-org sibling dep; likely loaded via CLI dispatcher, not direct import. Stable FP for this package. | ai | |
| phantom-deps | phantom-dep:@releasekit/version | AI (phantom-deps): Same-org sibling dep; likely loaded via CLI dispatcher, not direct import. Stable FP for this package. | ai |
Versions (showing 29 of 129)
| Version | Deps | Published |
|---|---|---|
| 0.7.18 | 8 / 9 | |
| 0.7.17 | 8 / 9 | |
| 0.7.16 | 8 / 9 | |
| 0.7.15 | 8 / 9 | |
| 0.7.14 | 8 / 9 | |
| 0.7.13 | 8 / 9 | |
| 0.7.12 | 8 / 9 | |
| 0.7.11 | 8 / 9 | |
| 0.7.10 | 8 / 9 | |
| 0.7.9 | 8 / 9 | |
| 0.7.8 | 8 / 9 | |
| 0.7.7 | 8 / 9 | |
| 0.7.6 | 8 / 9 | |
| 0.7.5 | 8 / 9 | |
| 0.7.4 | 8 / 9 | |
| 0.7.3 | 8 / 9 | |
| 0.7.2 | 8 / 9 | |
| 0.7.1 | 8 / 9 | |
| 0.7.0 | 8 / 9 | |
| 0.6.1 | 8 / 9 | |
| 0.6.0 | 8 / 9 | |
| 0.5.0 | 8 / 9 | |
| 0.4.1 | 8 / 9 | |
| 0.4.0 | 8 / 9 | |
| 0.3.1 | 8 / 9 | |
| 0.3.0 | 8 / 9 | |
| 0.2.1 | 7 / 9 | |
| 0.2.0 | 6 / 7 | |
| 0.1.0 | 6 / 7 |