[codex] Add npm trusted publishing for react hooks#52
Conversation
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 42 minutes and 8 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (35)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 72fa6ef. Configure here.

Summary
@bitsocial/bitsocial-react-hooksand update docs/import examplespkc-loggerfrom the GitHub dependency to@pkcprotocol/pkc-loggeron npmValidation
corepack yarn install --immutablecorepack yarn prettiercorepack yarn lint(passes with existing warnings)corepack yarn type-checkcorepack yarn buildnpm publish --dry-run --access public --provenanceNotes
@bitsocial/bitsocial-react-hooks@0.1.0is already published on npm.package.jsonis not already on npm; it does not auto-bump versions.Note
Medium Risk
Modifies the release pipeline to publish to npm from CI and changes the package name/scope, so a misconfiguration could publish the wrong version or break consumers expecting the old scope.
Overview
Publishes the library as
@bitsocial/bitsocial-react-hooksinstead of@bitsocialnet/*, updatingpackage.jsonmetadata and aligning README/docs import/install examples and user-facing strings.Updates logging dependency usage by switching imports from
@pkc/pkc-loggerto the npm package@pkcprotocol/pkc-logger(and updatingyarn.lock).Enhances the
distCI job to support npm trusted publishing: addsid-tokenpermission, sets up Node/npm, commitsdist/coverage artifacts, then conditionally publishes to npm with--provenanceonly when artifacts changed and thepackage.jsonversion is not already published.Reviewed by Cursor Bugbot for commit dc6d658. Bugbot is set up for automated code reviews on this repo. Configure here.