From 2f82572660a648182ff3cf3d1defa6db4520cd42 Mon Sep 17 00:00:00 2001
From: botandbang <337765928+botandbang@users.noreply.github.com>
Date: Tue, 20 Oct 2026 19:48:37 -0400
Subject: [PATCH 1/2] fix: add the repository field to core and parsefiles

---
 .github/workflows/lint.yml | 9 +++++++++
 core/package.json          | 4 ++++
 parsefiles/package.json    | 4 ++++
 3 files changed, 17 insertions(+)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index b9ee846..2a1b5cb 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -4,6 +4,7 @@ on:
   push:
     paths:
       - 'package.json'
+      - '*/package.json'
       - 'biome.json'
       - '.npmrc'
     branches:
@@ -11,6 +12,7 @@ on:
   pull_request:
     paths:
       - 'package.json'
+      - '*/package.json'
       - 'biome.json'
       - '.npmrc'
     branches:
@@ -33,4 +35,11 @@ jobs:
       run: npm install -ws
     - name: Run npm lint
       run: npm run lint
+    # npm rejects a provenance publish when repository.url doesn't match the
+    # repo the release workflow runs in, so every package release.yml
+    # publishes has to name it
+    - name: Check published packages name this repository
+      run: |
+        npm pkg get repository.url -w aliases -w core -w fetchindex -w newest -w oldest -w parsefiles -w ranges -w static --json \
+          | jq -e 'to_entries | map(select(.value["repository.url"] != "git+https://github.com/cutenode/nodevu.git") | .key) | if length == 0 then true else ("missing or wrong repository.url: " + join(", ") | halt_error) end'
       
diff --git a/core/package.json b/core/package.json
index 23067b2..357224e 100644
--- a/core/package.json
+++ b/core/package.json
@@ -30,5 +30,9 @@
 		"@biomejs/biome": "2.5.15",
 		"c8": "^10.1.2",
 		"undici": "^6.20.1"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/cutenode/nodevu.git"
 	}
 }
diff --git a/parsefiles/package.json b/parsefiles/package.json
index 5e61866..78db837 100644
--- a/parsefiles/package.json
+++ b/parsefiles/package.json
@@ -26,5 +26,9 @@
 	"devDependencies": {
 		"@biomejs/biome": "2.5.15",
 		"c8": "^10.1.2"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/cutenode/nodevu.git"
 	}
 }

From 100e2924d3f0db5bbfa5ab54f088670ecbe245be Mon Sep 17 00:00:00 2001
From: botandbang <337765928+botandbang@users.noreply.github.com>
Date: Tue, 20 Oct 2026 20:00:36 -0400
Subject: [PATCH 2/2] ci(lint): read repository.url from each package.json
 directly

---
 .github/workflows/lint.yml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 2a1b5cb..128639f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -40,6 +40,12 @@ jobs:
     # publishes has to name it
     - name: Check published packages name this repository
       run: |
-        npm pkg get repository.url -w aliases -w core -w fetchindex -w newest -w oldest -w parsefiles -w ranges -w static --json \
-          | jq -e 'to_entries | map(select(.value["repository.url"] != "git+https://github.com/cutenode/nodevu.git") | .key) | if length == 0 then true else ("missing or wrong repository.url: " + join(", ") | halt_error) end'
+        status=0
+        for ws in aliases core fetchindex newest oldest parsefiles ranges static; do
+          if ! jq -e '.repository.url == "git+https://github.com/cutenode/nodevu.git"' "$ws/package.json" > /dev/null; then
+            echo "::error file=$ws/package.json::repository.url must be git+https://github.com/cutenode/nodevu.git"
+            status=1
+          fi
+        done
+        exit "$status"