sandbox

Sandbox for testing integrations

npmjs-publish sandbox

Lightweight sandbox package to exercise the npm publish workflow without touching the main repo. Mirrors the real workflow (pnpm, build/test/lint, tag-driven publish) but defaults to a safe dry run and skips release creation (releases are managed manually).

What this contains

• Minimal TypeScript package with build/lint/test.
• GitHub Actions workflow (.github/workflows/publish-js.yml) that:
  • Runs on tags like js@1.2.3 or via workflow_dispatch.
  • Builds, tests, lints, then publishes (dry run by default).
• pnpm-based toolchain (packageManager pinned to pnpm 9).

How to try it

1. From this folder, install deps: pnpm install.
2. Run checks locally (should all pass):
   • pnpm lint
   • pnpm test
   • pnpm build
3. Commit/push this folder to a new repo (or keep it here).
4. Trigger the workflow:
   • Push a tag like js@0.0.2, or
   • Use the GitHub UI Run workflow button and keep dry_run=true (default).

Notes

• The workflow uses npm OIDC publish with provenance; repo must be public and package.json.repository.url must match the GitHub repo.
• Defaults are conservative (dry run, no release creation). Flip dry_run to false when ready to publish for real; releases are handled outside the workflow.