typescript-plugin/skills/bun-publish/SKILL.md
Bun publish to npm. Use when the user wants to release to npm, preview with --dry-run, publish a scoped package with --access public, or enable --provenance signing.
npx skillsauth add laurigates/claude-plugins bun-publishInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Publish package to npm registry after building with Bun.
| Use this skill when... | Use bun-publishing instead when... |
|---|---|
| Executing a single npm publish action with the right flags | Looking up broader npm publishing workflow guidance and conventions |
| Previewing a publish with --dry-run before releasing | Configuring publishConfig, scoped-package access, or provenance setup |
| Releasing a scoped package with --access public | Use bun-build when you need to produce build artifacts before publishing |
| Enabling supply-chain --provenance signing on a release | Use bun-lockfile-update when bumping dependencies before a release |
--dry-run: Preview publish without executing--access: Access level (public or restricted)--provenance: Enable supply chain provenance signingDetect package configuration:
cat package.json | jq '{name, version, publishConfig, bin, files, scripts: {prepublishOnly: .scripts.prepublishOnly}}'
# Type check
bun run tsc --noEmit 2>&1 | head -20
# Build
bun run build
# Verify tarball contents
npm pack --dry-run
Dry run (default for first attempt):
npm publish --dry-run {{ "--access " + ACCESS if ACCESS }}
Actual publish:
# Standard package
npm publish {{ "--access " + ACCESS if ACCESS }} {{ "--provenance" if PROVENANCE }}
# Scoped package (auto-detect from name starting with @)
npm publish --access public {{ "--provenance" if PROVENANCE }}
If package.json name starts with @:
--access public unless explicitly restrictedpublishConfig.access is not set in package.jsonnpm view <package> versionnpm install <package>402 Payment Required:
--access public for public registrypublishConfig.access: "public" to package.jsonMissing authentication:
npm login to authenticateNPM_TOKEN environment variabletesting
Verify accumulated bug claims at upstream HEAD and dedup against trackers before filing issues. Use when filing upstream reports from backlogs, audit docs, or git-history findings.
documentation
Gate outward-bound text (upstream issues, docs, PR bodies) through isolated haiku fresh-reader critique before publishing. Use when an artifact must survive a reader with zero project context.
tools
Suggest improvements to SKILL.md content, descriptions, or tool config from eval results. Use when raising pass rates, fixing triggering, or iterating on a skill after evaluation.
tools
deadbranch CLI for stale-branch cleanup — dry-run preview, TUI or non-interactive delete, protects main/develop/WIP. Use when asked to clean up branches, prune branches, or remove stale branches.