What problem does it solve? Release pipelines fail silently or catastrophically when versions are invalid, tokens lack permissions, or registry propagation is assumed instant. This Skill encodes defensive CI/CD patterns learned from a real npm publish outage so workflows catch these failures before they ship. ## Core Features & Use Cases - Semver Validation Gate: Blocks 4-part versions (e.g., 0.8.21.4) before npm publish using npx semver checks. - Token & Retry Safeguards: Enforces npm Automation tokens over 2FA user tokens and adds 5-attempt, 15-second-interval retry loops for registry propagation delays. - Draft Release & Build Protection: Detects draft releases that never emit release: published events and requires SKIP_BUILD_BUMP=1 to prevent version mutation during release builds. - Use Case: A team publishing a package to npm adds these gates to their GitHub Actions workflow, preventing the multi-hour outage caused by an invalid semver tag and an EOTP token error. ## Quick Start Add the semver validation gate and retry-based package verification steps from this Skill to my npm publish GitHub Actions workflow.
