semantic-release is a CLI tool and library that automates software release workflows based on semantic versioning and conventional commits. It analyzes commit messages since the last release to determine the next version number (major, minor, patch), generates release notes, creates a Git tag, and publishes the package to registries (npm, GitHub, etc.) via a plugin system. The architecture is modular: a core engine orchestrates plugin steps (verify conditions, analyze commits, generate notes, prepare, publish, notify) and supports multiple release branches, pre-releases, maintenance branches, and distribution channels. Plugins are loaded dynamically and can be configured via CLI arguments, configuration files, or shareable configurations. The codebase is written in modern JavaScript (ES modules) and has comprehensive test coverage including unit, integration, and end-to-end tests. It is actively maintained with a large community and is designed to be extended with custom plugins.

This repository is a semantic-release plugin that automates the publishing of npm packages. It implements four lifecycle steps: verifyConditions (validates configuration and authentication), prepare (updates package.json version and optionally creates a tarball), publish (publishes the package to the npm registry), and addChannel (adds a release to a dist-tag). The plugin supports both token-based authentication (via NPM_TOKEN) and OIDC-based trusted publishing for GitHub Actions, GitLab Pipelines, and CircleCI. It can publish to custom registries, handle scoped packages, and skip publishing for private packages or when npmPublish is false. The architecture is a set of exported async functions that receive pluginConfig and context from semantic-release, delegating to internal lib modules. External dependencies include the npm CLI (executed via execa), fs-extra for file operations, registry-auth-token for authentication, env-ci for CI provider detection, and @actions/core for OIDC token retrieval. The codebase is well-structured with clear separation of concerns, comprehensive error handling using AggregateError, and extensive test coverage with both unit and integration tests.