pypi-doppler

What problem does it solve?

Publishing Python packages to PyPI from CI/CD pipelines often involves security risks (long-lived tokens), slow feedback loops, and lack of manual control. This skill enforces a secure, local-only publishing workflow with robust credential management.

Core Features & Use Cases

• Local-Only PyPI Publishing: Provides a script for publishing Python packages directly from your local machine, bypassing slow CI/CD pipelines.
• Doppler Credential Management: Securely retrieves PyPI API tokens from Doppler, eliminating plaintext storage and enabling easy rotation.
• CI Detection Guards: Prevents accidental execution in CI/CD environments, enforcing the local-only policy.
• Pre-Publish Validation: Automatically verifies version increments and repository state before publishing, preventing errors.
• Use Case: After a new version of your Python package has been tagged by semantic-release, use this skill to quickly and securely publish it to PyPI from your local machine, ensuring a fast and controlled release process.

Quick Start

Publish the current Python package to PyPI using Doppler credentials. Ensure the version has been incremented by semantic-release.