fix: use trusted publishing for npm releases

.github/workflows/release.yaml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write
   pull-requests: write
 
 jobs:
@@ -24,6 +25,8 @@ jobs:
         uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
+          registry-url: https://registry.npmjs.org
+          package-manager-cache: false
 
       - name: Install Dependencies
         if: ${{ steps.publish.outputs.release_created }}
@@ -33,9 +36,10 @@ jobs:
         if: ${{ steps.publish.outputs.release_created }}
         run: npm run build
 
+      - name: Run Tests
+        if: ${{ steps.publish.outputs.release_created }}
+        run: npm test
+
       - name: Publish to NPM
         if: ${{ steps.publish.outputs.release_created }}
-        run: echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> .npmrc && npm publish
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-
+        run: npm publish

bin/ott.js

@@ -0,0 +1,3 @@
+#! /usr/bin/env node
+
+require('../dist/main.js');

package.json

@@ -17,15 +17,16 @@
   ],
   "main": "./dist/main.js",
   "bin": {
-    "ott": "./dist/main.js"
+    "ott": "bin/ott.js"
   },
   "files": [
+    "bin",
     "dist",
     "CHANGELOG.md"
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/pablaber/openapi-typescript-types/"
+    "url": "git+https://github.com/pablaber/openapi-typescript-types.git"
   },
   "scripts": {
     "build": "tsc",
@@ -53,4 +54,4 @@
     "minimatch": "^9.0.4",
     "winston": "^3.13.0"
   }
-}
+}