Use this checklist before publishing a GuardDiff release.
package.jsonroot is publishable asguarddiff.@guarddiff/coreis published before@guarddiff/cli.@guarddiff/cliis published before rootguarddiff.npm pack --dry-run,npm pack --dry-run -w @guarddiff/core, andnpm pack --dry-run -w @guarddiff/cliinclude only runtime files, metadata, README, and license content.npm install -g guarddiff && guarddiff stagedworks on Node.js 18+.
npm cinpm run typechecknpm testnpm run test:coveragenpm run buildnpm run benchmark:fp
integrations/github-action/dist/main.jsis rebuilt and tracked.- Root
action.ymlpoints tointegrations/github-action/dist/main.js; local integrationaction.ymlpoints todist/main.js. - Default
rules-registry-urluses the raw GitHub manifest URL. - Smoke test runs on a real PR with comments and SARIF enabled.
- GitHub Actions in release-capable workflows are pinned to full commit SHAs.
SECURITY.md,CODE_OF_CONDUCT.md, issue templates, and release workflow are present.- Tag format is
vMAJOR.MINOR.PATCH. - GitHub Release notes mention rule changes, false-positive changes, and breaking changes.
- README top section shows the install command and demo images.