apunkt/webclaw
1
0
Fork 0
mirror of https://github.com/0xMassi/webclaw.git synced 2026-07-24 07:31:01 +02:00
Code Issues Projects Releases Packages Wiki Activity

fix(create-webclaw): add files allowlist so npm never ships secrets

Browse source 
npm pack was bundling packages/create-webclaw/.mcpregistry_*_token (the
mcp-publisher credential files) into the tarball because the package had no
'files' field and npm did not honor the repo-root .gitignore. Restrict the
published package to index.mjs + README.md (matches @webclaw/mcp).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Valerio 2026-07-22 12:08:32 +02:00
parent b5818fe2ce
commit d497c5ee97
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
packages/create-webclaw/package.json
View file

@ -6,6 +6,10 @@
"create-webclaw": "./index.mjs"
},
"type": "module",
"files": [
"index.mjs",
"README.md"
],
"keywords": [
"webclaw",
"mcp",