diff --git a/.github/workflows/ctest.yml b/.github/workflows/ctest.yml
index d565b5e..4cde873 100644
--- a/.github/workflows/ctest.yml
+++ b/.github/workflows/ctest.yml
@@ -1,4 +1,6 @@
 name: ctest
+permissions:
+  contents: read
 
 on:
   - pull_request
diff --git a/.github/workflows/example.yml b/.github/workflows/example.yml
index 393b7b5..7a2f45c 100644
--- a/.github/workflows/example.yml
+++ b/.github/workflows/example.yml
@@ -1,4 +1,6 @@
 name: examples
+permissions:
+  contents: read
 
 on:
   - pull_request
diff --git a/.github/workflows/jest.yml b/.github/workflows/jest.yml
index 0a3548b..573ab24 100644
--- a/.github/workflows/jest.yml
+++ b/.github/workflows/jest.yml
@@ -1,4 +1,6 @@
 name: jest
+permissions:
+  contents: read
 
 on:
   - pull_request
@@ -6,6 +8,7 @@ on:
 
 env:
   EM_CACHE_FOLDER: 'emsdk-cache'
+  NODE_LATEST_VERSION: '24'
 
 jobs:
   jest:
@@ -38,3 +41,41 @@ jobs:
 
       - name: jest
         run: npm run all
+
+  npm:
+    runs-on: ubuntu-latest
+    needs: jest
+
+    if: "github.event_name == 'push' && startsWith(github.ref, 'refs/tags')"
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: recovery tag information
+        run: git fetch --tags --force
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_LATEST_VERSION }}
+          cache: 'npm'
+
+      - uses: actions/cache@v4
+        with:
+          path: ${{ env.EM_CACHE_FOLDER }}
+          key: jest-em-cache-${{ runner.os }}-${{ env.NODE_LATEST_VERSION }}
+
+      - uses: pyodide/setup-emsdk@v15
+        with:
+          actions-cache-folder: ${{ env.EM_CACHE_FOLDER }}
+
+      - name: version
+        run: npm version from-git
+
+      - name: dependencies
+        run: npm ci
+
+      - name: build
+        run: npm run build
+
+      - name: publish
+        run: npm publish
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index a71f093..cfbfa3b 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -1,4 +1,6 @@
 name: pre-commit
+permissions:
+  contents: read
 
 on:
   - push
diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index 4fe0f36..c61f196 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -6,6 +6,9 @@ on:
   - pull_request
   - push
 
+env:
+  PYTHON_LATEST_VERSION: '3.13'
+
 jobs:
   pytest:
     runs-on: ubuntu-latest
@@ -46,9 +49,10 @@ jobs:
       - name: recovery tag information
         run: git fetch --tags --force
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
-          python-version: '3.13'
+          python-version: ${{ env.PYTHON_LATEST_VERSION }}
+          cache: 'pip'
 
       - name: install cibuildwheel
         run: pip install cibuildwheel
diff --git a/package.json b/package.json
index c9ffe9e..2fc4bb6 100644
--- a/package.json
+++ b/package.json
@@ -1,5 +1,5 @@
 {
-    "name": "tsds",
+    "name": "atsds",
     "type": "module",
     "main": "dist/tsds.mjs",
     "types": "dist/tsds.d.mts",