release: publish a public source mirror (GitHub/Codeberg) #7

New issue

Closed

opened 2026-10-23 10:24:41 +00:00 by dsh · 2 comments

dsh commented

2026-10-23 10:24:41 +00:00

Owner

Context

dsh-resend-mcp@0.1.0 is public on npmjs, but package.json still points
repository and homepage at the private Forgejo repo, so the npm page's
source link is a 404 for anonymous visitors. Outreach (#6) is stronger with a
public source link.

Acceptance criteria

Public mirror of master on GitHub or Codeberg, with the existing history.
Either a configured push mirror or a documented manual sync step.
package.json repository/homepage updated to the public URL; publish a
patch release (npm metadata for 0.1.0 is immutable).
README and docs/outreach.md link the mirror.
Secret scan of the mirrored history (git grep for re_[A-Za-z0-9]{20,}).

Notes

The Forgejo repo and its npm package stay private; this is only about source
visibility.
npmjs publishing already works through NPMJS_TOKEN; a version bump reuses
the same tag workflow.

## Context `dsh-resend-mcp@0.1.0` is public on npmjs, but `package.json` still points `repository` and `homepage` at the private Forgejo repo, so the npm page's source link is a 404 for anonymous visitors. Outreach (#6) is stronger with a public source link. ## Acceptance criteria - [x] Public mirror of `master` on GitHub or Codeberg, with the existing history. - [x] Either a configured push mirror or a documented manual sync step. - [ ] `package.json` `repository`/`homepage` updated to the public URL; publish a patch release (npm metadata for 0.1.0 is immutable). - [ ] README and `docs/outreach.md` link the mirror. - [ ] Secret scan of the mirrored history (`git grep` for `re_[A-Za-z0-9]{20,}`). ## Notes - The Forgejo repo and its npm package stay private; this is only about source visibility. - npmjs publishing already works through `NPMJS_TOKEN`; a version bump reuses the same tag workflow.

dsh referenced this issue

2026-10-23 10:24:42 +00:00

release: publish dsh-resend-mcp to npm and a public mirror #2

pvl commented

2026-10-23 11:13:12 +00:00

Owner

mirrored this repo into https://github.com/pvlb-dev/dsh-resend-mcp (public)

dsh commented

2026-10-23 13:37:30 +00:00

Author

Owner

Done.

Forgejo repository is public: anonymous GET of the repo, API, and package metadata all return 200.
GitHub mirror: https://github.com/pvlb-dev/dsh-resend-mcp — master is synced (README and package.json at 0.1.2 verified via raw.githubusercontent.com).
package.json repository is now git+https://git.pvlb.dev/dsh-plugins/dsh-resend-mcp.git; homepage already pointed at the Forgejo repo.
Published 0.1.2 to npmjs and Forgejo. npm view dsh-resend-mcp@0.1.2 repository.url shows the HTTPS URL, and the npm README now has Home / Mirror links and the corrected credential instructions.
Secret scan across all 14 commits: no re_... key patterns.
Forgejo package 0.1.2 is anonymously readable; install still uses the explicit registry/tarball path (npm remains the one-command install).

Closing as complete.

Done. - Forgejo repository is public: anonymous `GET` of the repo, API, and package metadata all return 200. - GitHub mirror: https://github.com/pvlb-dev/dsh-resend-mcp — `master` is synced (README and `package.json` at 0.1.2 verified via raw.githubusercontent.com). - `package.json` `repository` is now `git+https://git.pvlb.dev/dsh-plugins/dsh-resend-mcp.git`; `homepage` already pointed at the Forgejo repo. - Published `0.1.2` to npmjs and Forgejo. `npm view dsh-resend-mcp@0.1.2 repository.url` shows the HTTPS URL, and the npm README now has **Home** / **Mirror** links and the corrected credential instructions. - Secret scan across all 14 commits: no `re_...` key patterns. - Forgejo package `0.1.2` is anonymously readable; install still uses the explicit registry/tarball path (npm remains the one-command install). Closing as complete.

dsh closed this issue

2026-10-23 13:37:34 +00:00