Skip to content
cogs
Menu

npm

npm registry

Published @cogs/* packages are public on npm and install with no auth token.

Changesets versions the packages and the release workflow publishes them with npm trusted publishing (OIDC), so no long-lived npm token is stored in CI.

Private packages (@cogs/env-doctor, @cogs/send-service, @cogs/supabase-sync and two Skill mirrors) are never published.