Skip to content

fix(cli): correct the package README, which said the package was unpublished (0.5.2) - #17

Merged
qmarcelle merged 1 commit into
mainfrom
fix/cli-readme-install-instructions
Jul 27, 2026
Merged

fix(cli): correct the package README, which said the package was unpublished (0.5.2)#17
qmarcelle merged 1 commit into
mainfrom
fix/cli-readme-install-instructions

Conversation

@qmarcelle

Copy link
Copy Markdown
Contributor

Summary

packages/cli/README.md is listed in files, so it ships in the tarball and renders on the npm package page. It still carried the pre-release notice:

Not yet published. This package is not on npm. Until the coordinated publish-authority cutover, the working public command is npx agents-audit generate… Do not document npm install @workspacejson/cli as if it works.

So the page for a published package was telling people not to install it, and redirecting them to agents-audit — which is frozen.

I missed this when updating the publishing docs in #14: I fixed the root README.md and the changelog and never checked the per-package README, which is the one users actually see.

Changes

  • Real install instructions, plus a note that releases carry npm provenance
  • A migration table for anyone arriving from agents-audit: renamed binary, no scan, .agentsauditrc not read

Cut as 0.5.2 through the changeset flow. A README-only change still needs a release — the npm page updates only on publish.

Verification

  • pnpm run check:architecture
  • pnpm -r build
  • pnpm -r test — 108 tests
  • pnpm run release:verify-packs — packed tarball carries the corrected README (3.0kB)
  • parity harness — not run locally; CI runs it unconditionally. Documentation only, no code change.

Notes

Release after merge: git tag cli-v0.5.2 && git push --tags.

agents-audit's own README is untouched — it is frozen at 0.4.4, so its npm page cannot be updated regardless. It documents npm install -D agents-audit, which is accurate for that package.

…blished

`packages/cli/README.md` is listed in `files`, so it ships in the tarball and
renders on the npm package page. It still carried the pre-release notice — "Not
yet published. This package is not on npm… Do not document
`npm install @workspacejson/cli` as if it works" — so the page for a published
package was advising against installing it and redirecting to `agents-audit`.

I missed it when updating the publishing docs: I fixed the root README and the
changelog and never checked the per-package README, which is the one users
actually see.

Replaced with install instructions, a note that releases carry npm provenance,
and a migration table for anyone arriving from `agents-audit` — renamed binary,
no `scan`, `.agentsauditrc` not read.

Cut as 0.5.2. A README-only change still needs a release, because the text on the
npm page updates only on publish.

Verified: architecture guard, 108 tests, and the packed tarball carries the
corrected README.
Copilot AI review requested due to automatic review settings July 27, 2026 03:38

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@qmarcelle
qmarcelle merged commit e210ad2 into main Jul 27, 2026
3 checks passed
@qmarcelle
qmarcelle deleted the fix/cli-readme-install-instructions branch July 27, 2026 03:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants