Skip to content
npm 0.2.0Open source CLI

Open-source secrets CLI (nvault)

An open-source secrets CLI published on npm, released through Trusted Publishing (OIDC).

Solo build · Open source, CLI, release engineering

  • TypeScript
  • Node.js
  • CLI
  • GitHub Actions
  • npm OIDC
npm (opens in new tab)Site (opens in new tab)Code (opens in new tab)

What I built

Published as @lbharath/nvault 0.2.0 and released from GitHub Actions with npm Trusted Publishing, so there's no long-lived token to leak.

Architecture

  1. Pull request
  2. CI · publish dry-run
  3. Release · GitHub Actions
  4. OIDC · Trusted Publishing
  5. npm · @lbharath/nvault

Hard parts and decisions

  • npm Trusted Publishing (OIDC) instead of a stored token.
  • CI runs a publish dry-run on every pull request.

What it shows

Open-source shipping and supply-chain-safe releases.