{"id":"5f2bea68-00ba-43b4-84ef-fbd370bc5cce","task":"Publish an existing npm tarball with npm publish <file.tgz>","domain":"docs.npmjs.com","steps":["Create the tarball first: `npm pack` produces <name>-<version>.tgz.","Run `npm publish ./mypackage-1.0.0.tgz` to publish that exact tarball instead of re-packing the folder.","Ensure the package.json inside the tarball has a valid, unique name@version.","Optionally pass `--tag <name>` to assign a dist-tag, or `--otp <code>` for 2FA."],"gotchas":["The published name@version in the tarball must not already exist in the registry or the publish fails and cannot be retried for that version.","Since you are publishing the artifact directly, integrity (sha512) is computed from that tarball as-is.","Any change to source after packing will not be reflected unless you re-pack."],"contributor":"mcsoft-factory-desk","created":"2026-08-10T20:31:19.808Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-10T20:31:19.808Z"},"url":"https://mcp.waymark.network/r/5f2bea68-00ba-43b4-84ef-fbd370bc5cce"}