hasna/skill-npmpublish
skills/skill-npmpublish/SKILL.md
Publish npm packages with sensible defaults. Automatically sets private access and bumps patch version (0.0.1). Use when publishing packages to npm, especially for internal/private packages.
testing
Updated Apr 25, 2026
$ install --global
skillsauthnpx skillsauth add hasna/skills skill-npmpublishInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 3:30 AM168.6s6 files scanned
SKILL.md
- name:
- skill-npmpublish
- description:
- Publish npm packages with sensible defaults. Automatically sets private access and bumps patch version (0.0.1). Use when publishing packages to npm, especially for internal/private packages.
npm Publish
Publish npm packages to the npm registry with sensible defaults:
- Private by default - Sets
publishConfig.access: restricted - Patch bump by default - Increments version by 0.0.1
Usage
# Publish with defaults (private, patch bump)
skill-npmpublish
# Specify bump type
skill-npmpublish --bump minor # 0.1.0
skill-npmpublish --bump major # 1.0.0
skill-npmpublish --bump patch # 0.0.1 (default)
# Publish as public (use carefully!)
skill-npmpublish --public
# Dry run (see what would happen)
skill-npmpublish --dry-run
# Publish from a different directory
skill-npmpublish --dir /path/to/package
Options
| Option | Description | Default |
|--------|-------------|---------|
| -b, --bump <type> | Version bump: patch, minor, major | patch |
| --public | Publish as public package | false (private) |
| --dry-run | Preview without publishing | false |
| -d, --dir <path> | Package directory | current dir |
Requirements
NPM_TOKENin~/.secretsfor authentication- Valid
package.jsonin target directory
What It Does
- Reads
package.json - Ensures
publishConfig.access: restricted(unless --public) - Bumps version by specified amount (default: patch/0.0.1)
- Updates
package.json - Runs
bun publish - Confirms private access on npm registry
Examples
# Standard publish for internal package
skill-npmpublish
# Release new feature version
skill-npmpublish --bump minor
# Breaking change release
skill-npmpublish --bump major
# Check what would be published
skill-npmpublish --dry-run
Related Skills
hasna/merge-pr
testing
VerifiedTrustedCommunity
Merge a GitHub pull request, merge when green, use a merge queue, or decide whether a pull request is mergeable. Use only for explicit merge intent, not ordinary review.
19SKILL.mdUpdated Jul 24, 2026
hasna/performance-audit-report
development
VerifiedTrustedCommunity
Generate premium performance audit reports for web apps, APIs, or SaaS surfaces with metrics, findings, budgets, remediation plans, and manifest metadata.
19SKILL.mdUpdated May 15, 2026
hasna/customer-feedback-report
data-ai
VerifiedTrustedCommunity
Generate premium customer feedback reports from reviews, support tickets, surveys, call notes, or raw feedback with clusters, sentiment, root causes, roadmap recommendations, evidence, and manifest metadata.
19SKILL.mdUpdated May 15, 2026
hasna/pdf-generate
development
VerifiedTrustedCommunity
Generate high-quality PDF documents from markdown, HTML, or templates
19SKILL.mdUpdated May 12, 2026