act-security-labs/Dual npm publish

Publish the already-built npm package under an additional package name.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Aug 30, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: act-security-labs/dual-npm-publish-action@0af853d1d5705e464a5806bc0c9f9641e3b2c292 # no releases — HEAD as of 2026-08-31

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
package-nameThe additional npm package name to publish, for example @cloud-copilot/iam-collect.yes
versionThe version to publish. Usually semantic-release's nextRelease.version.yes
package-directoryDirectory containing the source package.json and build output.no.
accessnpm access level to pass to npm publish.nopublic
skip-existingSkip successfully if package-name@version already exists.notrue
dry-runRun npm publish with --dry-run.nofalse
npm-versionnpm CLI version to install before publishing. Use npm 11.5.1 or newer for Trusted Publishing.nolatest
namedescription
publishedWhether this action published the alias package.
skippedWhether this action skipped because the alias package version already exists.