typescript-plugin/skills/bun-publish/SKILL.md
Bun publish to npm. Use when the user wants to release to npm, preview with --dry-run, publish a scoped package with --access public, or enable --provenance signing.
npx skillsauth add laurigates/claude-plugins bun-publishInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Publish package to npm registry after building with Bun.
| Use this skill when... | Use bun-publishing instead when... |
|---|---|
| Executing a single npm publish action with the right flags | Looking up broader npm publishing workflow guidance and conventions |
| Previewing a publish with --dry-run before releasing | Configuring publishConfig, scoped-package access, or provenance setup |
| Releasing a scoped package with --access public | Use bun-build when you need to produce build artifacts before publishing |
| Enabling supply-chain --provenance signing on a release | Use bun-lockfile-update when bumping dependencies before a release |
--dry-run: Preview publish without executing--access: Access level (public or restricted)--provenance: Enable supply chain provenance signingDetect package configuration:
cat package.json | jq '{name, version, publishConfig, bin, files, scripts: {prepublishOnly: .scripts.prepublishOnly}}'
# Type check
bun run tsc --noEmit 2>&1 | head -20
# Build
bun run build
# Verify tarball contents
npm pack --dry-run
Dry run (default for first attempt):
npm publish --dry-run {{ "--access " + ACCESS if ACCESS }}
Actual publish:
# Standard package
npm publish {{ "--access " + ACCESS if ACCESS }} {{ "--provenance" if PROVENANCE }}
# Scoped package (auto-detect from name starting with @)
npm publish --access public {{ "--provenance" if PROVENANCE }}
If package.json name starts with @:
--access public unless explicitly restrictedpublishConfig.access is not set in package.jsonnpm view <package> versionnpm install <package>402 Payment Required:
--access public for public registrypublishConfig.access: "public" to package.jsonMissing authentication:
npm login to authenticateNPM_TOKEN environment variabledevelopment
Debug HTTP APIs: trace requests, inspect headers. Use when a request fails: check status first.
documentation
Render architecture diagrams from text sources. Use when documenting system topology.
tools
Inspect JSON payloads and extract nested fields. Use when parsing API responses.
tools
--- name: no-description allowed-tools: Read --- # No Description This skill has no description and must be dropped with a warning.