AgentStack
SKILL verified Apache-2.0 Self-run

Npmpublish

skill-hasna-skills-npmpublish · by hasna

Publish npm packages with sensible defaults. Automatically sets private access and bumps patch version (0.0.1). Use when publishing packages to npm, especially for internal/private packages.

No reviews yet
0 installs
11 views
0.0% view→install

Install

$ agentstack add skill-hasna-skills-npmpublish

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Npmpublish? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

npm Publish

Publish npm packages to the npm registry with sensible defaults:

  • Private by default - Sets publishConfig.access: restricted
  • Patch bump by default - Increments version by 0.0.1

Usage

# Publish with defaults (private, patch bump)
npmpublish

# Specify bump type
npmpublish --bump minor    # 0.1.0
npmpublish --bump major    # 1.0.0
npmpublish --bump patch    # 0.0.1 (default)

# Publish as public (use carefully!)
npmpublish --public

# Dry run (see what would happen)
npmpublish --dry-run

# Publish from a different directory
npmpublish --dir /path/to/package

Options

| Option | Description | Default | |--------|-------------|---------| | -b, --bump | Version bump: patch, minor, major | patch | | --public | Publish as public package | false (private) | | --dry-run | Preview without publishing | false | | -d, --dir | Package directory | current dir |

Requirements

  • NPM_TOKEN in ~/.secrets for authentication
  • Valid package.json in target directory

What It Does

  1. Reads package.json
  2. Ensures publishConfig.access: restricted (unless --public)
  3. Bumps version by specified amount (default: patch/0.0.1)
  4. Updates package.json
  5. Runs bun publish
  6. Confirms private access on npm registry

Examples

# Standard publish for internal package
npmpublish

# Release new feature version
npmpublish --bump minor

# Breaking change release
npmpublish --bump major

# Check what would be published
npmpublish --dry-run

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.