From e3cf12865dae2f5bf4baa9290dba76172c88e16d Mon Sep 17 00:00:00 2001 From: Viktor Zolin Date: Thu, 1 Oct 2026 16:44:20 +0300 Subject: [PATCH] Add repository field to package.json npm OIDC provenance validation requires package.json repository.url to match the GitHub repo from the sigstore provenance bundle; the generated package.json has no repository field, so publish failed with E422: "package.json: repository.url is "", expected to match https://github.com/flipdishbytes/api-client-javascript from provenance" --- package.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index 7103a9be..8aeffae2 100644 --- a/package.json +++ b/package.json @@ -42,5 +42,9 @@ }, "files": [ "dist" - ] + ], + "repository": { + "type": "git", + "url": "git+https://github.com/flipdishbytes/api-client-javascript.git" + } }