[{"data":1,"prerenderedAt":523},["ShallowReactive",2],{"docs-navigation:en":3,"content-page:docs:f6CXnh132cIg6vlDWbePUz2_M-vlPITP-7t4KFQ_5Kw":223,"content-page-surround:docs:f6CXnh132cIg6vlDWbePUz2_M-vlPITP-7t4KFQ_5Kw":520},[4,25,83,141,168],{"title":5,"id":6,"canonicalKey":7,"locale":8,"draft":9,"icon":10,"path":11,"children":12},"Lupinum OSS handbook","content:docs:1.get-started:1.index.md","1","en",false,"lucide:book-open","\u002Fdocs\u002Fget-started",[13,19],{"title":14,"id":15,"canonicalKey":16,"locale":8,"draft":9,"icon":17,"path":18},"Choose a repository profile","content:docs:1.get-started:2.choose-a-profile.md","1\u002F2","lucide:git-branch","\u002Fdocs\u002Fget-started\u002Fchoose-a-profile",{"title":20,"id":21,"canonicalKey":22,"locale":8,"draft":9,"icon":23,"path":24},"New project path","content:docs:1.get-started:3.new-project-path.md","1\u002F3","lucide:route","\u002Fdocs\u002Fget-started\u002Fnew-project-path",{"title":26,"page":9,"canonicalKey":27,"locale":8,"children":28},"Standards","2",[29,35,41,47,53,59,65,71,77],{"title":30,"id":31,"canonicalKey":32,"locale":8,"draft":9,"icon":33,"path":34},"Repository structure","content:docs:2.standards:1.repository-structure.md","2\u002F1","lucide:folders","\u002Fdocs\u002Fstandards\u002Frepository-structure",{"title":36,"id":37,"canonicalKey":38,"locale":8,"draft":9,"icon":39,"path":40},"Documentation ownership","content:docs:2.standards:2.documentation-ownership.md","2\u002F2","lucide:files","\u002Fdocs\u002Fstandards\u002Fdocumentation-ownership",{"title":42,"id":43,"canonicalKey":44,"locale":8,"draft":9,"icon":45,"path":46},"GitHub and contributions","content:docs:2.standards:3.github-and-contributions.md","2\u002F3","lucide:github","\u002Fdocs\u002Fstandards\u002Fgithub-and-contributions",{"title":48,"id":49,"canonicalKey":50,"locale":8,"draft":9,"icon":51,"path":52},"Dependency policy","content:docs:2.standards:4.dependencies.md","2\u002F4","lucide:package-search","\u002Fdocs\u002Fstandards\u002Fdependencies",{"title":54,"id":55,"canonicalKey":56,"locale":8,"draft":9,"icon":57,"path":58},"Release security","content:docs:2.standards:5.release-security.md","2\u002F5","lucide:shield-check","\u002Fdocs\u002Fstandards\u002Frelease-security",{"title":60,"id":61,"canonicalKey":62,"locale":8,"draft":9,"icon":63,"path":64},"Package previews","content:docs:2.standards:6.package-previews.md","2\u002F6","lucide:package-open","\u002Fdocs\u002Fstandards\u002Fpackage-previews",{"title":66,"id":67,"canonicalKey":68,"locale":8,"draft":9,"icon":69,"path":70},"Documentation sites","content:docs:2.standards:7.documentation-sites.md","2\u002F7","lucide:panel-top","\u002Fdocs\u002Fstandards\u002Fdocumentation-sites",{"title":72,"id":73,"canonicalKey":74,"locale":8,"draft":9,"icon":75,"path":76},"Analytics and feedback","content:docs:2.standards:8.analytics-and-feedback.md","2\u002F8","lucide:chart-no-axes-combined","\u002Fdocs\u002Fstandards\u002Fanalytics-and-feedback",{"title":78,"id":79,"canonicalKey":80,"locale":8,"draft":9,"icon":81,"path":82},"Security and agents","content:docs:2.standards:9.security-and-agents.md","2\u002F9","lucide:bot-message-square","\u002Fdocs\u002Fstandards\u002Fsecurity-and-agents",{"title":84,"page":9,"canonicalKey":85,"locale":8,"children":86},"Procedures","3",[87,93,99,105,111,117,123,129,135],{"title":88,"id":89,"canonicalKey":90,"locale":8,"draft":9,"icon":91,"path":92},"Create a repository","content:docs:3.procedures:1.create-a-repository.md","3\u002F1","lucide:folder-plus","\u002Fdocs\u002Fprocedures\u002Fcreate-a-repository",{"title":94,"id":95,"canonicalKey":96,"locale":8,"draft":9,"icon":97,"path":98},"First npm release","content:docs:3.procedures:2.first-npm-release.md","3\u002F2","lucide:package-plus","\u002Fdocs\u002Fprocedures\u002Ffirst-npm-release",{"title":100,"id":101,"canonicalKey":102,"locale":8,"draft":9,"icon":103,"path":104},"Normal release","content:docs:3.procedures:3.normal-release.md","3\u002F3","lucide:package-check","\u002Fdocs\u002Fprocedures\u002Fnormal-release",{"title":106,"id":107,"canonicalKey":108,"locale":8,"draft":9,"icon":109,"path":110},"Prerelease","content:docs:3.procedures:4.prerelease.md","3\u002F4","lucide:flask-conical","\u002Fdocs\u002Fprocedures\u002Fprerelease",{"title":112,"id":113,"canonicalKey":114,"locale":8,"draft":9,"icon":115,"path":116},"Hotfix","content:docs:3.procedures:5.hotfix.md","3\u002F5","lucide:ambulance","\u002Fdocs\u002Fprocedures\u002Fhotfix",{"title":118,"id":119,"canonicalKey":120,"locale":8,"draft":9,"icon":121,"path":122},"Rollback","content:docs:3.procedures:6.rollback.md","3\u002F6","lucide:undo-2","\u002Fdocs\u002Fprocedures\u002Frollback",{"title":124,"id":125,"canonicalKey":126,"locale":8,"draft":9,"icon":127,"path":128},"Dependency update","content:docs:3.procedures:7.dependency-update.md","3\u002F7","lucide:refresh-cw","\u002Fdocs\u002Fprocedures\u002Fdependency-update",{"title":130,"id":131,"canonicalKey":132,"locale":8,"draft":9,"icon":133,"path":134},"Documentation change","content:docs:3.procedures:8.documentation-change.md","3\u002F8","lucide:file-pen-line","\u002Fdocs\u002Fprocedures\u002Fdocumentation-change",{"title":136,"id":137,"canonicalKey":138,"locale":8,"draft":9,"icon":139,"path":140},"Credential incident","content:docs:3.procedures:9.credential-incident.md","3\u002F9","lucide:key-round","\u002Fdocs\u002Fprocedures\u002Fcredential-incident",{"title":142,"page":9,"canonicalKey":143,"locale":8,"children":144},"Checklists","4",[145,151,156,162],{"title":146,"id":147,"canonicalKey":148,"locale":8,"draft":9,"icon":149,"path":150},"Repository launch checklist","content:docs:4.checklists:1.repository-launch.md","4\u002F1","lucide:list-checks","\u002Fdocs\u002Fchecklists\u002Frepository-launch",{"title":152,"id":153,"canonicalKey":154,"locale":8,"draft":9,"icon":97,"path":155},"First release checklist","content:docs:4.checklists:2.first-release.md","4\u002F2","\u002Fdocs\u002Fchecklists\u002Ffirst-release",{"title":157,"id":158,"canonicalKey":159,"locale":8,"draft":9,"icon":160,"path":161},"Production acceptance checklist","content:docs:4.checklists:3.production-acceptance.md","4\u002F3","lucide:monitor-check","\u002Fdocs\u002Fchecklists\u002Fproduction-acceptance",{"title":163,"id":164,"canonicalKey":165,"locale":8,"draft":9,"icon":166,"path":167},"Quarterly audit checklist","content:docs:4.checklists:4.quarterly-audit.md","4\u002F4","lucide:calendar-check","\u002Fdocs\u002Fchecklists\u002Fquarterly-audit",{"title":169,"id":170,"canonicalKey":171,"locale":8,"draft":9,"icon":172,"path":173,"children":174},"Troubleshooting","content:docs:5.troubleshooting:1.index.md","5","lucide:wrench","\u002Fdocs\u002Ftroubleshooting",[175,181,187,193,199,205,211,217],{"title":176,"id":177,"canonicalKey":178,"locale":8,"draft":9,"icon":179,"path":180},"npm trusted publishing","content:docs:5.troubleshooting:2.npm-trusted-publishing.md","5\u002F2","lucide:shield-alert","\u002Fdocs\u002Ftroubleshooting\u002Fnpm-trusted-publishing",{"title":182,"id":183,"canonicalKey":184,"locale":8,"draft":9,"icon":185,"path":186},"GitHub Actions","content:docs:5.troubleshooting:3.github-actions.md","5\u002F3","lucide:workflow","\u002Fdocs\u002Ftroubleshooting\u002Fgithub-actions",{"title":188,"id":189,"canonicalKey":190,"locale":8,"draft":9,"icon":191,"path":192},"GitHub Action SHA errors","content:docs:5.troubleshooting:4.action-sha-errors.md","5\u002F4","lucide:git-commit-horizontal","\u002Fdocs\u002Ftroubleshooting\u002Faction-sha-errors",{"title":194,"id":195,"canonicalKey":196,"locale":8,"draft":9,"icon":197,"path":198},"Dependency quarantine","content:docs:5.troubleshooting:5.dependency-quarantine.md","5\u002F5","lucide:timer","\u002Fdocs\u002Ftroubleshooting\u002Fdependency-quarantine",{"title":200,"id":201,"canonicalKey":202,"locale":8,"draft":9,"icon":203,"path":204},"Vercel deployment","content:docs:5.troubleshooting:6.vercel.md","5\u002F6","lucide:triangle","\u002Fdocs\u002Ftroubleshooting\u002Fvercel",{"title":206,"id":207,"canonicalKey":208,"locale":8,"draft":9,"icon":209,"path":210},"Plausible analytics","content:docs:5.troubleshooting:7.plausible.md","5\u002F7","lucide:chart-no-axes-column-increasing","\u002Fdocs\u002Ftroubleshooting\u002Fplausible",{"title":212,"id":213,"canonicalKey":214,"locale":8,"draft":9,"icon":215,"path":216},"Package preview failures","content:docs:5.troubleshooting:8.package-previews.md","5\u002F8","lucide:package-x","\u002Fdocs\u002Ftroubleshooting\u002Fpackage-previews",{"title":218,"id":219,"canonicalKey":220,"locale":8,"draft":9,"icon":221,"path":222},"GitHub CLI authentication","content:docs:5.troubleshooting:9.github-cli-authentication.md","5\u002F9","lucide:terminal","\u002Fdocs\u002Ftroubleshooting\u002Fgithub-cli-authentication",{"title":152,"description":224,"icon":97,"body":225,"type":507,"id":153,"canonicalKey":154,"draft":9,"partial":9,"locale":8,"collection":508,"navigationFile":9,"file":509,"route":515,"resolution":517},"Bootstrap a new npm package and prove its permanent release path.",{"type":226,"children":227,"toc":498},"root",[228,236,243,310,316,373,379,449,455],{"type":229,"tag":230,"props":231,"children":232},"element","p",{},[233],{"type":234,"value":235},"text","Use this checklist for each new package name.",{"type":229,"tag":237,"props":238,"children":240},"h2",{"id":239},"before-publication",[241],{"type":234,"value":242},"Before publication",{"type":229,"tag":244,"props":245,"children":247},"ul",{"class":246},"contains-task-list",[248,262,278,286,294,302],{"type":229,"tag":249,"props":250,"children":252},"li",{"class":251},"task-list-item",[253,260],{"type":229,"tag":254,"props":255,"children":259},"input",{"class":256,"type":257,"disabled":258},"task-list-item-checkbox","checkbox",true,[],{"type":234,"value":261}," The version and dist-tag are correct.",{"type":229,"tag":249,"props":263,"children":264},{"class":251},[265,268,270,276],{"type":229,"tag":254,"props":266,"children":267},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":269}," Protected ",{"type":229,"tag":271,"props":272,"children":273},"code",{},[274],{"type":234,"value":275},"main",{"type":234,"value":277}," contains the release commit.",{"type":229,"tag":249,"props":279,"children":280},{"class":251},[281,284],{"type":229,"tag":254,"props":282,"children":283},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":285}," Full release certification passed at that exact commit.",{"type":229,"tag":249,"props":287,"children":288},{"class":251},[289,292],{"type":229,"tag":254,"props":290,"children":291},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":293}," The retained artifact contains the tarball and manifest.",{"type":229,"tag":249,"props":295,"children":296},{"class":251},[297,300],{"type":229,"tag":254,"props":298,"children":299},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":301}," Local artifact hashes match CI.",{"type":229,"tag":249,"props":303,"children":304},{"class":251},[305,308],{"type":229,"tag":254,"props":306,"children":307},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":309}," The npm package name is available and owned by the correct scope.",{"type":229,"tag":237,"props":311,"children":313},{"id":312},"bootstrap",[314],{"type":234,"value":315},"Bootstrap",{"type":229,"tag":244,"props":317,"children":318},{"class":246},[319,327,349,357,365],{"type":229,"tag":249,"props":320,"children":321},{"class":251},[322,325],{"type":229,"tag":254,"props":323,"children":324},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":326}," The exact certified tarball was published with public access and scripts disabled.",{"type":229,"tag":249,"props":328,"children":329},{"class":251},[330,333,335,340,342,347],{"type":229,"tag":254,"props":331,"children":332},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":334}," Stable versions use ",{"type":229,"tag":271,"props":336,"children":337},{},[338],{"type":234,"value":339},"latest",{"type":234,"value":341},"; prereleases use ",{"type":229,"tag":271,"props":343,"children":344},{},[345],{"type":234,"value":346},"next",{"type":234,"value":348},".",{"type":229,"tag":249,"props":350,"children":351},{"class":251},[352,355],{"type":229,"tag":254,"props":353,"children":354},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":356}," The public npm SHA-1 matches the manifest.",{"type":229,"tag":249,"props":358,"children":359},{"class":251},[360,363],{"type":229,"tag":254,"props":361,"children":362},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":364}," No local rebuild occurred.",{"type":229,"tag":249,"props":366,"children":367},{"class":251},[368,371],{"type":229,"tag":254,"props":369,"children":370},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":372}," The absence of OIDC provenance on this first version is recorded.",{"type":229,"tag":237,"props":374,"children":376},{"id":375},"trusted-publishing",[377],{"type":234,"value":378},"Trusted publishing",{"type":229,"tag":244,"props":380,"children":381},{"class":246},[382,390,404,418,426,434],{"type":229,"tag":249,"props":383,"children":384},{"class":251},[385,388],{"type":229,"tag":254,"props":386,"children":387},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":389}," The trusted publisher uses the exact repository.",{"type":229,"tag":249,"props":391,"children":392},{"class":251},[393,396,398,403],{"type":229,"tag":254,"props":394,"children":395},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":397}," The workflow file is ",{"type":229,"tag":271,"props":399,"children":400},{},[401],{"type":234,"value":402},"publish.yml",{"type":234,"value":348},{"type":229,"tag":249,"props":405,"children":406},{"class":251},[407,410,412,417],{"type":229,"tag":254,"props":408,"children":409},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":411}," The environment is ",{"type":229,"tag":271,"props":413,"children":414},{},[415],{"type":234,"value":416},"npm",{"type":234,"value":348},{"type":229,"tag":249,"props":419,"children":420},{"class":251},[421,424],{"type":229,"tag":254,"props":422,"children":423},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":425}," Direct publish permission is enabled.",{"type":229,"tag":249,"props":427,"children":428},{"class":251},[429,432],{"type":229,"tag":254,"props":430,"children":431},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":433}," The trust record was listed and checked.",{"type":229,"tag":249,"props":435,"children":436},{"class":251},[437,440,442,447],{"type":229,"tag":254,"props":438,"children":439},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":441}," No ",{"type":229,"tag":271,"props":443,"children":444},{},[445],{"type":234,"value":446},"NPM_TOKEN",{"type":234,"value":448}," exists in the repository, organization, or environment.",{"type":229,"tag":237,"props":450,"children":452},{"id":451},"public-record",[453],{"type":234,"value":454},"Public record",{"type":229,"tag":244,"props":456,"children":457},{"class":246},[458,466,474,482,490],{"type":229,"tag":249,"props":459,"children":460},{"class":251},[461,464],{"type":229,"tag":254,"props":462,"children":463},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":465}," The Git tag points to the release commit.",{"type":229,"tag":249,"props":467,"children":468},{"class":251},[469,472],{"type":229,"tag":254,"props":470,"children":471},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":473}," The GitHub release uses the correct changelog section.",{"type":229,"tag":249,"props":475,"children":476},{"class":251},[477,480],{"type":229,"tag":254,"props":478,"children":479},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":481}," A clean consumer can install and use the package.",{"type":229,"tag":249,"props":483,"children":484},{"class":251},[485,488],{"type":229,"tag":254,"props":486,"children":487},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":489}," The npm README and repository links render correctly.",{"type":229,"tag":249,"props":491,"children":492},{"class":251},[493,496],{"type":229,"tag":254,"props":494,"children":495},{"class":256,"type":257,"disabled":258},[],{"type":234,"value":497}," A later patch release has proved OIDC provenance and the normal workflow.",{"title":499,"searchDepth":500,"depth":500,"links":501},"",4,[502,504,505,506],{"id":239,"depth":503,"text":242},2,{"id":312,"depth":503,"text":315},{"id":375,"depth":503,"text":378},{"id":451,"depth":503,"text":454},"markdown","docs",{"source":510,"path":511,"stem":512,"dir":513,"extension":514},"content","docs\u002F4.checklists\u002F2.first-release.md","docs\u002F4.checklists\u002F2.first-release","checklists","md",{"requestedPath":155,"resolvedPath":155,"alternates":516},[],{"requested":518,"resolved":519,"usedFallback":9},{},{"locale":8},{"previous":521,"next":522},{"title":146,"id":147,"canonicalKey":148,"locale":8,"draft":9,"path":150},{"title":157,"id":158,"canonicalKey":159,"locale":8,"draft":9,"path":161},1786663364471]