Variant 01
GitHub Actions + npm
Maps the owner-reviewed trigger, minimum-permission review, npm package metadata, static checks, owner-only account step, and rollback checkpoint.
Open the static outline ↗04 Static reference variants
Four outlines. No live release step.
These downloadable text files document the information a bounded handoff needs for four common lanes. They are intentionally non-runnable: no dependency install, package lifecycle execution, token value, account change, or publish command is included.
Variant 02
GitHub Actions + pnpm workspace
Adds an explicit one-package workspace boundary so an accepted pilot cannot silently become a monorepo-wide migration.
Open the static outline ↗Variant 03
GitLab CI + npm
Maps one owner-reviewed GitLab release lane and leaves provider eligibility and identity-token configuration for current-documentation confirmation.
Open the static outline ↗Variant 04
GitLab CI + pnpm workspace
Combines the GitLab path with a single accepted workspace target and an explicit stop before owner-controlled validation and publication.
Open the static outline ↗Reference boundary: these files are documentation, not drop-in production workflows. Provider support and required settings must be confirmed against npm’s current Trusted Publishing documentation for the accepted package. ReleaseOrigin never runs these files from this site.