hasna/skill-npmpublish
skills/skill-npmpublish/SKILL.md
Publish npm packages with sensible defaults. Automatically sets private access and bumps patch version (0.0.1). Use when publishing packages to npm, especially for internal/private packages.
testing
Updated Apr 25, 2026
$ install --global
skillsauthnpx skillsauth add hasna/skills skill-npmpublishInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 3:30 AM168.6s6 files scanned
SKILL.md
- name:
- skill-npmpublish
- description:
- Publish npm packages with sensible defaults. Automatically sets private access and bumps patch version (0.0.1). Use when publishing packages to npm, especially for internal/private packages.
npm Publish
Publish npm packages to the npm registry with sensible defaults:
- Private by default - Sets
publishConfig.access: restricted - Patch bump by default - Increments version by 0.0.1
Usage
# Publish with defaults (private, patch bump)
skill-npmpublish
# Specify bump type
skill-npmpublish --bump minor # 0.1.0
skill-npmpublish --bump major # 1.0.0
skill-npmpublish --bump patch # 0.0.1 (default)
# Publish as public (use carefully!)
skill-npmpublish --public
# Dry run (see what would happen)
skill-npmpublish --dry-run
# Publish from a different directory
skill-npmpublish --dir /path/to/package
Options
| Option | Description | Default |
|--------|-------------|---------|
| -b, --bump <type> | Version bump: patch, minor, major | patch |
| --public | Publish as public package | false (private) |
| --dry-run | Preview without publishing | false |
| -d, --dir <path> | Package directory | current dir |
Requirements
NPM_TOKENin~/.secretsfor authentication- Valid
package.jsonin target directory
What It Does
- Reads
package.json - Ensures
publishConfig.access: restricted(unless --public) - Bumps version by specified amount (default: patch/0.0.1)
- Updates
package.json - Runs
bun publish - Confirms private access on npm registry
Examples
# Standard publish for internal package
skill-npmpublish
# Release new feature version
skill-npmpublish --bump minor
# Breaking change release
skill-npmpublish --bump major
# Check what would be published
skill-npmpublish --dry-run
Related Skills
hasna/voiceover-jingle-pack
tools
VerifiedTrustedCommunity
Generate hosted voiceover variants and short jingles
5SKILL.mdUpdated May 29, 2026
hasna/video-highlight-pack
tools
VerifiedTrustedCommunity
Generate premium video highlight packages with clip plans, captions, thumbnails, chapter markers, social copy, edit decisions, and manifest metadata.
5SKILL.mdUpdated May 29, 2026
hasna/write
testing
VerifiedTrustedCommunity
Generate high-quality articles using parallel AI agents. Supports research, writing, and optional cover image generation. Write single articles or batch process multiple topics with configurable parallelism.
5SKILL.mdUpdated May 12, 2026
hasna/video
testing
VerifiedTrustedCommunity
Generate videos using OpenAI Sora, Minimax Hailuo, Gemini Veo, or Seedance through the hosted Skills runtime with provider-cost pricing.
5SKILL.mdUpdated May 12, 2026