sirwanafifi_inkplane/package.json
Sirwan Afifi bf23ed7bd0 release: 0.2.9 with attestation propagation gate
Prior releases published ~3s after attesting, so Obsidian's dashboard could
scan the release before the attestation propagated to GitHub's public API and
cache a failed verdict — matching a same-day report from another plugin author
where every post-hoc check (gh attestation verify, one attestation per digest,
matching repo/commit) passed yet the dashboard still failed.

- Gate release creation on gh attestation verify succeeding against the public
  API (retry loop), so we never publish before the attestation is queryable.
- Upgrade to actions/attest-build-provenance@v4.
- Fresh 0.2.9 asset digests (styles.css comment + main.js version banner) so
  the new scan runs against digests with a single clean attestation.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-17 16:17:36 +01:00

44 lines
1.2 KiB
JSON

{
"name": "inkplane",
"version": "0.2.9",
"description": "A Pencil-first infinite drawing canvas with embeds for Obsidian.",
"private": true,
"type": "module",
"scripts": {
"dev": "node esbuild.config.mjs",
"build": "tsc --noEmit --skipLibCheck && node esbuild.config.mjs production",
"test": "vitest run",
"test:watch": "vitest",
"validate:release": "node scripts/check-release.mjs",
"check": "npm run test && npm run build && npm run validate:release",
"version": "node version-bump.mjs && git add manifest.json versions.json"
},
"keywords": [
"obsidian",
"apple-pencil",
"canvas",
"handwriting",
"infinite-canvas",
"ink"
],
"license": "MIT",
"repository": {
"type": "git",
"url": "git+https://github.com/SirwanAfifi/inkplane.git"
},
"bugs": {
"url": "https://github.com/SirwanAfifi/inkplane/issues"
},
"homepage": "https://github.com/SirwanAfifi/inkplane#readme",
"dependencies": {
"perfect-freehand": "^1.2.3"
},
"devDependencies": {
"@types/node": "^24.0.0",
"esbuild": "^0.28.1",
"obsidian": "^1.13.1",
"tslib": "^2.8.1",
"typescript": "^7.0.2",
"vitest": "^4.1.10"
}
}