Instruction file imported from tikoci/rosetta (.github/instructions/npm-channel-source-of-truth.instructions.md). Copyright stays with the author.

npm channel source of truth

Name: npm-channel-source-of-truth
Author: tikoci

release.yml's "Determine npm release channel" step derives latest vs. prerelease (and the stage: alpha/beta/rc) entirely by parsing package.json's committed version field.

Do not add a workflow_dispatch input, environment variable, or other CI-side flag that also selects or overrides the channel — that would let the two signals disagree.
A bare MAJOR.MINOR.PATCH version means latest. A MAJOR.MINOR.PATCH-<stage> or -<stage>.N version means prerelease, with <stage> validated against the alpha/beta/rc allowlist. Anything else fails the workflow loudly — never treat an unrecognized shape as latest by default.
If a channel-adjacent input is genuinely needed later (e.g. limiting which registries get the floating tag), keep package.json's version as the single source of truth for the channel decision itself, and layer the new input on top rather than replacing it.

{ "ocm": "1", "id": "tikoci-rosetta-npm-channel-source-of-truth-instructions", "kind": "skill", "name": "npm-channel-source-of-truth", "description": "package.json's committed version is the sole signal for npm/OCI release channel (latest vs. alpha/beta/rc). Do not add a CI-side flag or input that duplicates it.", "publisher": "tikoci", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "github-instructions" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "package.json's committed version is the sole signal for npm/OCI release channel (latest vs. alpha/beta/rc). Do not add a CI-side flag or input that duplicates it." ], "primary": false, "metadata": { "source": { "provider": "github-instructions", "repository": "https://github.com/tikoci/rosetta", "path": ".github/instructions/npm-channel-source-of-truth.instructions.md", "ref": "c6177da2e6d274fc7a31f679e1e8fa681c25a6c3", "url": "https://github.com/tikoci/rosetta/blob/c6177da2e6d274fc7a31f679e1e8fa681c25a6c3/.github/instructions/npm-channel-source-of-truth.instructions.md", "key": "tikoci/rosetta/.github/instructions/npm-channel-source-of-truth.instructions.md" }, "applies_to": ".github/workflows/release.yml, package.json, MANUAL.md, README.md" }, "instructions": "# npm channel source of truth\n\n`release.yml`'s \"Determine npm release channel\" step derives `latest` vs. `prerelease` (and the stage: `alpha`/`beta`/`rc`) entirely by parsing `package.json`'s committed `version` field.\n\n- Do not add a `workflow_dispatch` input, environment variable, or other CI-side flag that also selects or overrides the channel — that would let the two signals disagree.\n- A bare `MAJOR.MINOR.PATCH` version means `latest`. A `MAJOR.MINOR.PATCH-<stage>` or `-<stage>.N` version means prerelease, with `<stage>` validated against the `alpha`/`beta`/`rc` allowlist. Anything else f", "cost": { "context_tokens": 236 } }

npm-channel-source-of-truth

About

npm channel source of truth

Use it

Manifest

Reviews