JoshuaKGoldberg / JoshuaKGoldberg/create-typescript-app
🚀 Feature: Create NPM_TOKEN npm automation publish tokens for the user automatically
- Dominant language
- TypeScript
- Stars
- 1.4k
- Forks
- 89
- Avg merge
- 1m
- Merged PRs (30d)
- 3
Description
### Bug Report Checklist
- [x] I have pulled the latest `main` branch of the repository.
- [x] I have [searched for related issues](https://github.com/JoshuaKGoldberg/create-typescript-app/issues?q=is%3Aissue) and found none that matched my issue.
### Overview
Right now, CTA asks that upon creation of a repository you manually add an npm automation token under `NPM_TOKEN`:
https://github.com/JoshuaKGoldberg/create-typescript-app/blob/c0325c4ebdc35950583419b54527d85e6ed23cc7/docs/Creation.md#L19-L21
This is clunky and annoying to do every single time a repository is created. I'd strongly prefer to have this be done automatically through the npm API for users.
### Additional Info
Per https://docs.npmjs.com/creating-and-viewing-access-tokens#creating-tokens-with-the-cli & https://docs.npmjs.com/creating-and-viewing-access-tokens#creating-granular-access-tokens-on-the-website, it doesn't look like this can be done automatically for _automation_ tokens. 😞. I'd wager that's a security concern. So, marking this as blocked.
Contributor guide
Assessment
This issue has not been assessed yet.