JoshuaKGoldberg / JoshuaKGoldberg/create-typescript-app

🚀 Feature: Create NPM_TOKEN npm automation publish tokens for the user automatically

Open
#1,900 0 comments 0 reactions 0 assignees View on GitHub
status: blocked type: feature
Dominant language
TypeScript
Stars
1.4k
Forks
89
Avg merge
1m
Merged PRs (30d)
3

Description

### Bug Report Checklist

- [x] I have pulled the latest `main` branch of the repository.
- [x] I have [searched for related issues](https://github.com/JoshuaKGoldberg/create-typescript-app/issues?q=is%3Aissue) and found none that matched my issue.

### Overview

Right now, CTA asks that upon creation of a repository you manually add an npm automation token under `NPM_TOKEN`:

https://github.com/JoshuaKGoldberg/create-typescript-app/blob/c0325c4ebdc35950583419b54527d85e6ed23cc7/docs/Creation.md#L19-L21

This is clunky and annoying to do every single time a repository is created. I'd strongly prefer to have this be done automatically through the npm API for users.

### Additional Info

Per https://docs.npmjs.com/creating-and-viewing-access-tokens#creating-tokens-with-the-cli & https://docs.npmjs.com/creating-and-viewing-access-tokens#creating-granular-access-tokens-on-the-website, it doesn't look like this can be done automatically for _automation_ tokens. 😞. I'd wager that's a security concern. So, marking this as blocked.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.