chore: enforce code quality standards

- Add build/ to .gitignore
- Add files field to package.json (src, bin)
- Add CI release workflow (OIDC + changesets)
- Add .changeset/config.json

Author: sulthonzh

.changeset/config.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@3.0.0/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": []
+}

.github/workflows/release.yml

@@ -0,0 +1,42 @@
+name: Release
+
+on:
+  push:
+    branches: [main]
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+
+jobs:
+  release:
+    name: Version & Publish
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          registry-url: https://registry.npmjs.org
+
+      - run: npm ci
+
+      - name: Create Release Pull Request or Publish
+        uses: changesets/action@v1
+        with:
+          publish: npx changeset publish
+          version: npx changeset version
+          commit: "chore(release): version packages"
+          title: "chore(release): version packages"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: "true"

.gitignore

@@ -31,3 +31,5 @@ Thumbs.db
 
 # package
 *.tgz
+
+build/

package.json

@@ -3,10 +3,27 @@
   "version": "1.0.0",
   "description": "Compare package-lock.json between git refs — see exactly what changed in your dependencies",
   "main": "src/index.js",
-  "bin": { "lockdiff": "src/cli.js" },
-  "scripts": { "test": "node test/index.test.js" },
-  "keywords": ["lockfile", "diff", "npm", "dependencies", "code-review", "package-lock"],
+  "bin": {
+    "lockdiff": "src/cli.js"
+  },
+  "scripts": {
+    "test": "node test/index.test.js"
+  },
+  "keywords": [
+    "lockfile",
+    "diff",
+    "npm",
+    "dependencies",
+    "code-review",
+    "package-lock"
+  ],
   "author": "sulthonzh",
   "license": "MIT",
-  "engines": { "node": ">=14" }
+  "engines": {
+    "node": ">=14"
+  },
+  "files": [
+    "src",
+    "bin"
+  ]
 }