From 180a216aa9d3b0a0d8d4d679867d96d451eac24c Mon Sep 17 00:00:00 2001 From: Robin Andeer Date: Mon, 6 Jul 2026 14:30:32 -0400 Subject: [PATCH] fix: add repository field for npm provenance validation OIDC publish requires package.json repository to match the GitHub repo in the provenance attestation. --- packages/core/package.json | 1 + packages/react/package.json | 1 + 2 files changed, 2 insertions(+) diff --git a/packages/core/package.json b/packages/core/package.json index 542589a..a7204e0 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -57,6 +57,7 @@ ], "author": "RunwayML", "license": "MIT", + "repository": "github:runwayml/avatars-sdk-react", "publishConfig": { "access": "public" }, diff --git a/packages/react/package.json b/packages/react/package.json index 4c9a8d1..93f430f 100644 --- a/packages/react/package.json +++ b/packages/react/package.json @@ -64,6 +64,7 @@ ], "author": "RunwayML", "license": "MIT", + "repository": "github:runwayml/avatars-sdk-react", "publishConfig": { "access": "public" },