ChatNPM

ChatNPM: ChatArch npm registry and package maintenance helper

文档：https://arch.gh.wzhecnu.cn/ChatNPM/

快速开始

pip install chatnpm
chatnpm --tree
chatnpm package inspect npm --format json
chatnpm trusted audit . --format json
python -m pytest -q
python -m build

真实 CLI 树

chatnpm  # ChatArch npm registry and publishing-evidence helper.
├── --help  # Show this help message.
├── --version  # Show the installed package version.
├── --tree  # Print the registered command tree.
├── package  # Inspect npm package registry metadata.
│   └── inspect PACKAGE [--version PACKAGE-VERSION] [--registry REGISTRY] [--format text|json]  # Read npm registry publisher/provenance metadata for PACKAGE.
└── trusted  # Audit npm Trusted Publishing evidence.
    └── audit [PATH] [--format text|json]  # Read local package/workflow evidence for npm Trusted Publishing.

npm 发布元数据只读检查

chatnpm package inspect <package> 会读取公开 npm registry packument，输出安全摘要：

package / version / scope
public maintainers count and names from registry metadata
repository and safe publishConfig summary
dist integrity/signature/attestation presence
provenance evidence when dist.attestations is present
local GitHub Actions evidence for npm OIDC / npm publish --provenance through chatnpm trusted audit

npm 的公开 registry 不提供类似 PyPI 项目设置页的 Trusted Publisher 表格，因此 ChatNPM 会明确报告：

Trusted Publishing settings: not exposed by public npm registry

这不是失败，也不是推断没有 Trusted Publishing；它只表示公开读回只能验证 registry provenance/attestation evidence，不能读取 npm 账号/包设置里的 trusted-publishing 配置。

CLI 规范

这个包当前运行时只依赖 Click；新的命令应优先使用真实注册命令生成的 chatnpm --tree 作为文档与测试来源。

目录结构

src/：包源码
tests/：CLI、registry、trusted publishing、docs/workflow contract 测试
docs/：长期维护文档，由 MkDocs Material + i18n 构建

开发说明

扩展前先阅读 DEVELOP.md 和 AGENTS.md。

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

chatnpm-0.1.3.tar.gz (14.6 kB view details)

Uploaded Aug 12, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

chatnpm-0.1.3-py3-none-any.whl (11.9 kB view details)

Uploaded Aug 12, 2026 Python 3

File details

Details for the file chatnpm-0.1.3.tar.gz.

File metadata

Download URL: chatnpm-0.1.3.tar.gz
Upload date: Aug 12, 2026
Size: 14.6 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for chatnpm-0.1.3.tar.gz
Algorithm	Hash digest
SHA256	`ef72fb53551cf50b7c60cba95daeb43e418950c7233c6535772d531c4a303ee3`
MD5	`0a7049d6c9f89767220ab95222c9db8f`
BLAKE2b-256	`f1d57fad5ddb0469d7efd5b3ba2dac4f6ef8460005982dca5d0826581c9b241f`

See more details on using hashes here.

Provenance

The following attestation bundles were made for chatnpm-0.1.3.tar.gz:

Publisher: publish.yml on ChatArch/ChatNPM

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: chatnpm-0.1.3.tar.gz
- Subject digest: ef72fb53551cf50b7c60cba95daeb43e418950c7233c6535772d531c4a303ee3
- Sigstore transparency entry: 2429985751
- Sigstore integration time: Aug 12, 2026
Source repository:
- Permalink: ChatArch/ChatNPM@14480903a83022017b48c6b008aa5513b5492f95
- Branch / Tag: refs/tags/v0.1.3
- Owner: https://github.com/ChatArch
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: publish.yml@14480903a83022017b48c6b008aa5513b5492f95
- Trigger Event: push