hasna/npmpublish
skills/npmpublish/SKILL.md
Publish npm packages with sensible defaults. Automatically sets private access and bumps patch version (0.0.1). Use when publishing packages to npm, especially for internal/private packages.
testing
Updated May 15, 2026
$ install --global
skillsauthnpx skillsauth add hasna/skills npmpublishInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 15, 2026, 3:03 AM145.8s6 files scanned
SKILL.md
- name:
- npmpublish
- description:
- Publish npm packages with sensible defaults. Automatically sets private access and bumps patch version (0.0.1). Use when publishing packages to npm, especially for internal/private packages.
npm Publish
Publish npm packages to the npm registry with sensible defaults:
- Private by default - Sets
publishConfig.access: restricted - Patch bump by default - Increments version by 0.0.1
Usage
# Publish with defaults (private, patch bump)
npmpublish
# Specify bump type
npmpublish --bump minor # 0.1.0
npmpublish --bump major # 1.0.0
npmpublish --bump patch # 0.0.1 (default)
# Publish as public (use carefully!)
npmpublish --public
# Dry run (see what would happen)
npmpublish --dry-run
# Publish from a different directory
npmpublish --dir /path/to/package
Options
| Option | Description | Default |
|--------|-------------|---------|
| -b, --bump <type> | Version bump: patch, minor, major | patch |
| --public | Publish as public package | false (private) |
| --dry-run | Preview without publishing | false |
| -d, --dir <path> | Package directory | current dir |
Requirements
NPM_TOKENin~/.secretsfor authentication- Valid
package.jsonin target directory
What It Does
- Reads
package.json - Ensures
publishConfig.access: restricted(unless --public) - Bumps version by specified amount (default: patch/0.0.1)
- Updates
package.json - Runs
bun publish - Confirms private access on npm registry
Examples
# Standard publish for internal package
npmpublish
# Release new feature version
npmpublish --bump minor
# Breaking change release
npmpublish --bump major
# Check what would be published
npmpublish --dry-run
Related Skills
hasna/brand-assets
development
VerifiedTrustedCommunity
Fetch official brand assets from a website or brand name, then return logos, palette, typography, source metadata, and a clean asset manifest. Use when a user asks to find, extract, download, package, or normalize a brand's logo and visual identity assets.
8SKILL.mdUpdated Jun 7, 2026
hasna/voiceover-jingle-pack
tools
VerifiedTrustedCommunity
Generate hosted voiceover variants and short jingles
8SKILL.mdUpdated May 29, 2026
hasna/video-highlight-pack
tools
VerifiedTrustedCommunity
Generate premium video highlight packages with clip plans, captions, thumbnails, chapter markers, social copy, edit decisions, and manifest metadata.
8SKILL.mdUpdated May 29, 2026
hasna/test-suite-generator
development
VerifiedTrustedCommunity
Generate premium API, unit, and browser test suite packages with runnable tests and coverage notes.
8SKILL.mdUpdated May 15, 2026