{"_id":"@dc-bytedance/oidc-rehearsal","_rev":"3-3542c5715452b18127156a7e4a17a61c","name":"@dc-bytedance/oidc-rehearsal","dist-tags":{"latest":"0.1.2"},"versions":{"0.0.1":{"name":"@dc-bytedance/oidc-rehearsal","version":"0.0.1","license":"MIT","_id":"@dc-bytedance/oidc-rehearsal@0.0.1","maintainers":[{"name":"dc-bytedance","email":"dengchang.yuki@bytedance.com"}],"homepage":"https://github.com/dc-bytedance/oidc-rehearsal#readme","bugs":{"url":"https://github.com/dc-bytedance/oidc-rehearsal/issues"},"dist":{"shasum":"1e55951ed1e8a5790ffc5343b8f4d6db47350512","tarball":"https://registry.npmjs.org/@dc-bytedance/oidc-rehearsal/-/oidc-rehearsal-0.0.1.tgz","fileCount":2,"integrity":"sha512-WrVRfQQoWDwyap0bVWeJLoqnEug6SWFMWgal+3F98QVW2/CEaxvMMK5ayWDGqPF1Mv/SFSqfG3vSoxdEy6LJ9g==","signatures":[{"sig":"MEUCIQC9lb2i7Dp7h/8GPu49q23E0semqMdzof5uO/idN+YUiQIgBoYGWGWMLNjaXU7k2XYeTt2qb7Z0937l75uKPYTvAUY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1143},"gitHead":"71750b1d4402b0b1f736591120cce2190630651e","_npmUser":{"name":"dc-bytedance","email":"dengchang.yuki@bytedance.com"},"repository":{"url":"git+https://github.com/dc-bytedance/oidc-rehearsal.git","type":"git"},"_npmVersion":"11.12.1","description":"Scratch package to rehearse npm OIDC trusted publishing + provenance.","directories":{},"_nodeVersion":"26.0.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/oidc-rehearsal_0.0.1_1782206380767_0.5510257220704768","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"@dc-bytedance/oidc-rehearsal","version":"0.1.1","license":"MIT","_id":"@dc-bytedance/oidc-rehearsal@0.1.1","maintainers":[{"name":"dc-bytedance","email":"dengchang.yuki@bytedance.com"}],"homepage":"https://github.com/dc-bytedance/oidc-rehearsal#readme","bugs":{"url":"https://github.com/dc-bytedance/oidc-rehearsal/issues"},"dist":{"shasum":"dca82c6aae7dc3aa0a05ac5dec0724d0cd19a2be","tarball":"https://registry.npmjs.org/@dc-bytedance/oidc-rehearsal/-/oidc-rehearsal-0.1.1.tgz","fileCount":2,"integrity":"sha512-egqrWYZZqrMzQdpgLcu4ldxDU2FyUoj5jTVPF/OCsHXTanK3507GHDjyD81kS5r1goRa8WScqqqmvOfKuZkhMA==","signatures":[{"sig":"MEQCIEcY5KP4lJ2UYAyPpdrl+aR8smSmugO1YMOs9xCebRViAiBCF/X9/UGfWq4MDJHrirhE9HfmVy4YMZDu4Pzt08tXqQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@dc-bytedance%2foidc-rehearsal@0.1.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":1143},"gitHead":"a10ae625ec8f62797ef8abeb0b79fe1efb8dd1c5","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:10b0a8cb-88a8-4eb4-aebd-7bdd82cfae67"}},"repository":{"url":"git+https://github.com/dc-bytedance/oidc-rehearsal.git","type":"git"},"_npmVersion":"11.17.0","description":"Scratch package to rehearse npm OIDC trusted publishing + provenance.","directories":{},"_nodeVersion":"22.22.3","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/oidc-rehearsal_0.1.1_1782206626046_0.8584726127031561","host":"s3://npm-registry-packages-npm-production"}},"0.1.2":{"name":"@dc-bytedance/oidc-rehearsal","version":"0.1.2","description":"Scratch package to rehearse npm OIDC trusted publishing + provenance.","license":"MIT","repository":{"type":"git","url":"git+https://github.com/dc-bytedance/oidc-rehearsal.git"},"publishConfig":{"access":"public"},"gitHead":"ead01d7a3edc333b2d19ad3f9d6d6791fac37e94","_id":"@dc-bytedance/oidc-rehearsal@0.1.2","bugs":{"url":"https://github.com/dc-bytedance/oidc-rehearsal/issues"},"homepage":"https://github.com/dc-bytedance/oidc-rehearsal#readme","_nodeVersion":"22.22.3","_npmVersion":"11.17.0","dist":{"integrity":"sha512-xXrKYzaVDadJ0HPkYjg4jzm+S6cyXOmH7DxbVcIZsgGiPzCDbqG2bZHG5kt1QcqsjV7j25POgrXRYAtesDLUEA==","shasum":"83da2221ba9cd3ae35fc45f655786b4b79ff20c7","tarball":"https://registry.npmjs.org/@dc-bytedance/oidc-rehearsal/-/oidc-rehearsal-0.1.2.tgz","fileCount":2,"unpackedSize":1143,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@dc-bytedance%2foidc-rehearsal@0.1.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIErSv2obK9tzQbpkAupQPDlfFr8Mfk/bLVrPconnXAusAiAtb1Ai6do1T+8Z7WBWmo0Cdwol//wPxC6AZyM4d00FvA=="}]},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:10b0a8cb-88a8-4eb4-aebd-7bdd82cfae67"}},"directories":{},"maintainers":[{"name":"dc-bytedance","email":"dengchang.yuki@bytedance.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/oidc-rehearsal_0.1.2_1782212716826_0.5724889752364257"},"_hasShrinkwrap":false}},"time":{"created":"2026-06-23T09:19:40.612Z","modified":"2026-06-23T11:05:17.211Z","0.0.1":"2026-06-23T09:19:40.969Z","0.1.1":"2026-06-23T09:23:46.164Z","0.1.2":"2026-06-23T11:05:16.957Z"},"bugs":{"url":"https://github.com/dc-bytedance/oidc-rehearsal/issues"},"license":"MIT","homepage":"https://github.com/dc-bytedance/oidc-rehearsal#readme","repository":{"type":"git","url":"git+https://github.com/dc-bytedance/oidc-rehearsal.git"},"description":"Scratch package to rehearse npm OIDC trusted publishing + provenance.","maintainers":[{"name":"dc-bytedance","email":"dengchang.yuki@bytedance.com"}],"readme":"# oidc-rehearsal\n\nScratch repo to rehearse npm **Trusted Publishing (OIDC)** + provenance end-to-end.\n\nWhat this proves: a published npm package whose credentials were minted at runtime\nby GitHub OIDC (no long-lived `NPM_TOKEN`) and that carries a public provenance\nattestation.\n\nFlow:\n1. Bootstrap-publish `0.0.1` once with a normal npm login (trusted publishing can't\n   create a brand-new package's first version).\n2. Configure the Trusted Publisher on npmjs.com (web UI only): this repo + `publish.yml`.\n3. Run the **publish** workflow (Actions tab → Run workflow). It publishes with\n   `--provenance` and no token.\n4. Verify: `npm view <pkg>@<ver> dist.attestations`, provenance badge, `npm audit signatures`.\n\nThrowaway repo — safe to delete after the rehearsal.\n","readmeFilename":"README.md"}