New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

@guokexin.02/cli-oidc-rehearsal

Package Overview
Dependencies
Maintainers
1
Versions
5
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@guokexin.02/cli-oidc-rehearsal

Disposable package for rehearsing npm trusted publishing with GitHub Actions.

latest
Source
npmnpm
Version
0.4.2
Version published
Weekly downloads
7
250%
Maintainers
1
Weekly downloads
 
Created
Source

npm Trusted Publishing Rehearsal

Disposable public package used to verify npm Trusted Publishing with GitHub Actions.

It contains no production code, credentials, or internal references.

Rehearsed release flow

  • A protected v* tag triggers the release workflow.
  • The tag, package.json, and package-lock.json versions must match, and the tagged commit must be on main.
  • CI packs one tarball and generates checksums.txt.
  • The npm-publish GitHub Environment requires approval.
  • OIDC publishes the tarball on npm under the rehearsal dist-tag.
  • The same tarball and checksum are attached to a draft GitHub Release.

Keywords

npm

FAQs

Package last updated on 21 Jul 2026

Related posts