npm-trusted-publisher

May 28, 2026 ยท View on GitHub

Warning

This userscript is deprecated. Please uninstall it.

npm now ships a native npm trust command (npm v11.10+) which configures Trusted Publisher from the CLI without needing the npmjs.com web form.

Run the following in your package directory instead:

npm trust

Flow (legacy)

  • Activate when a page of https://www.npmjs.com/package/*/access is opened
  • The userscript will fetch the metadata of the current package.
  • It will try to read the repository field of the package metadata and find the corresponding GitHub repository.
  • Fill the form with the information of the GitHub repository for OIDC if found.

Learn More