fix: add the repository field to core and parsefiles

.github/workflows/lint.yml

@@ -4,13 +4,15 @@ on:
   push:
     paths:
       - 'package.json'
+      - '*/package.json'
       - 'biome.json'
       - '.npmrc'
     branches:
       - main
   pull_request:
     paths:
       - 'package.json'
+      - '*/package.json'
       - 'biome.json'
       - '.npmrc'
     branches:
@@ -33,4 +35,17 @@ jobs:
       run: npm install -ws
     - name: Run npm lint
       run: npm run lint
+    # npm rejects a provenance publish when repository.url doesn't match the
+    # repo the release workflow runs in, so every package release.yml
+    # publishes has to name it
+    - name: Check published packages name this repository
+      run: |
+        status=0
+        for ws in aliases core fetchindex newest oldest parsefiles ranges static; do
+          if ! jq -e '.repository.url == "git+https://github.com/cutenode/nodevu.git"' "$ws/package.json" > /dev/null; then
+            echo "::error file=$ws/package.json::repository.url must be git+https://github.com/cutenode/nodevu.git"
+            status=1
+          fi
+        done
+        exit "$status"
 

core/package.json

@@ -30,5 +30,9 @@
 		"@biomejs/biome": "2.5.15",
 		"c8": "^10.1.2",
 		"undici": "^6.20.1"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/cutenode/nodevu.git"
 	}
 }

parsefiles/package.json

@@ -26,5 +26,9 @@
 	"devDependencies": {
 		"@biomejs/biome": "2.5.15",
 		"c8": "^10.1.2"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/cutenode/nodevu.git"
 	}
 }