NPM CI/CD Publisher

关于

This skill streamlines the release process for JavaScript and TypeScript monorepos powered by Bun and Turborepo. It implements a robust CI/CD workflow leveraging Changesets for versioning and npm Trusted Publishers for secure, tokenless OIDC authentication via GitHub Actions. The skill specifically addresses common monorepo pain points such as workspace protocol resolution and CLI dependency management, ensuring production-ready packages are published reliably without the need for manual npm tokens or complex secret management.

主要功能

• Seamless integration with Bun, Turborepo, and GitHub Actions
• 359 GitHub stars
• Tokenless npm publishing via OIDC and Trusted Publishers
• Automated versioning and changelog generation with Changesets
• Automatic resolution of workspace protocols during the publish phase
• Built-in support for secure provenance attestations

使用场景

• Migrating Bun-based monorepos to automated Changeset workflows
• Setting up a zero-secret automated release pipeline for npm packages
• Fixing 'Cannot find module' errors caused by unresolved workspace dependencies