ChatNPM

ChatNPM: ChatArch npm registry and package maintenance helper

快速开始

pip install -e ".[dev]"
chatnpm hello ChatArch
chatnpm --tree
chatnpm package inspect npm --format json
chatnpm trusted audit . --format json
python -m pytest -q
python -m build

npm 发布元数据只读检查

chatnpm package inspect <package> 会读取公开 npm registry packument，输出安全摘要：

package / version / scope
public maintainers count and names from registry metadata
repository and safe publishConfig summary
dist integrity/signature/attestation presence
provenance evidence when dist.attestations is present
local GitHub Actions evidence for npm OIDC / npm publish --provenance through chatnpm trusted audit

npm 的公开 registry 不提供类似 PyPI 项目设置页的 Trusted Publisher 表格，因此 ChatNPM 会明确报告：

Trusted Publishing settings: not exposed by public npm registry

这不是失败，也不是推断没有 Trusted Publishing；它只表示公开读回只能验证 registry provenance/attestation evidence，不能读取 npm 账号/包设置里的 trusted-publishing 配置。

CLI 规范

这个包当前运行时依赖 chatstyle>=0.1.0,<0.2.0；未使用 ChatEnv 时不引入 chatenv 运行时依赖。新的命令应优先使用：

CommandSchema / CommandField 描述输入。
add_interactive_option() 提供统一 -i/-I。
resolve_command_inputs() 统一缺参补问、默认值、TTY 与校验。

目录结构

src/：包源码
tests/code-tests/：代码测试和历史测试迁移
tests/cli-tests/：真实 CLI 测试，doc-first
tests/mock-cli-tests/：mock/fake CLI 测试，doc-first
docs/：长期维护文档，由 mkdocs 构建

开发说明

扩展脚手架前，先阅读 DEVELOP.md 和 AGENTS.md。

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

chatnpm-0.1.2.tar.gz (12.8 kB view details)

Uploaded Aug 11, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

chatnpm-0.1.2-py3-none-any.whl (11.1 kB view details)

Uploaded Aug 11, 2026 Python 3

File details

Details for the file chatnpm-0.1.2.tar.gz.

File metadata

Download URL: chatnpm-0.1.2.tar.gz
Upload date: Aug 11, 2026
Size: 12.8 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for chatnpm-0.1.2.tar.gz
Algorithm	Hash digest
SHA256	`6f60726ead82c8f511d2eee4cf526035425ae28d2b15422c9e7c8fdd13d7a8af`
MD5	`0ceb5b04c0dbf389f1ee617f555f8e08`
BLAKE2b-256	`a739dc9d4e50fc7a9447c1a8a99e91cddd585b3462761496e5880a75f9395d3b`

See more details on using hashes here.

Provenance

The following attestation bundles were made for chatnpm-0.1.2.tar.gz:

Publisher: publish.yml on ChatArch/ChatNPM

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: chatnpm-0.1.2.tar.gz
- Subject digest: 6f60726ead82c8f511d2eee4cf526035425ae28d2b15422c9e7c8fdd13d7a8af
- Sigstore transparency entry: 2424980105
- Sigstore integration time: Aug 11, 2026
Source repository:
- Permalink: ChatArch/ChatNPM@bbf37d50e1762eec262ce79f5000f22459e60d14
- Branch / Tag: refs/tags/v0.1.2
- Owner: https://github.com/ChatArch
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: publish.yml@bbf37d50e1762eec262ce79f5000f22459e60d14
- Trigger Event: push