npm Trusted Publisher

What it does

Forget about NPM_TOKEN secrets. Start publishing securely in seconds. A drop-in kd-npm-publish.yml workflow that automates your npm releases using OIDC — no tokens, no manual setup. Includes a zero-config CLI to get started instantly.

• PF
  Publish from GitHub Actions using multi-factor authentication2022 · github.com · ▲72

  The backstory about this GitHub Action: I discussed with an open-source maintainer why they publish npm packages from their local machine and do not use CI/CD pipelines. They said publishing should require human intervention and want to continue using multi-factor authentication to publish to the npm registry. This led to building the wait-for-secrets GitHub Action. It prints a URL in the build log and waits for secrets to be entered using a browser. Once entered, the workflow continues, and secrets can be used in future steps. The latest release of "eslint-plugin-react" to the npm…

• 
  Phase2024 · ▲384

  Open source application secrets manager

• 
  Nitric Deploy2022 · ▲197

  The right infrastructure, auto-provisioned in your cloud

• 
  keychains.devFeb 2026 · keychains.dev · ▲177

  Give AI access to 6754+ APIs with zero credentials exposed

• 
  Keep2023 · ▲108

  Alerting, by developers, for developers

• TT
  Tips to stay safe from NPM supply chain attacksSep 2025 · github.com · ▲96

  Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

• 
  Dograh▲592

  The open source VAPI alternative

  Dev tools · 26d ago · dograh.com

• 
  Meridian▲530

  Don't let your work go unnoticed. Get promoted!

  Dev tools · 21d ago · meridiona.com

• 
  x1▲516

  Lovable for iPhone apps go from idea to App Store

  Dev tools · 12d ago · x1.new

• 
  Open-Source eInk Bike Computer▲412

  OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.

  Dev tools · 3d ago · opentrailpaper.com

• 
  Nuphos▲380

  The AI-Native DevOps Workspace.

  Dev tools · 25d ago · nuphos.ai

• 
  Lettertrace▲375

  Track your AI visibility for free (using your own API keys!)

  Dev tools · 26d ago · lettertrace.com

• 
  Lightfield▲891

  AI-native CRM that builds itself and does work for you

  AI · Mar 2026 · lightfield.app

• 
  Tobira.ai▲730

  A network where AI agents find deals for their humans

  AI · Mar 2026 · tobira.ai

• 
  Claude Import Memory▲725

  Switch from ChatGPT to Claude with import memory feature

  AI · Mar 2026 · claude.com

• 
  Littlebird▲712

  The AI assistant that already knows your work

  AI · Mar 2026 · littlebird.ai

• 
  Viktor.com▲701

  Your AI Coworker that proactively executes tasks

  AI · Mar 2026 · viktor.com

• 
  Jupid▲664

  File your taxes with Claude Code

  Commerce · Mar 2026 · jupid.com