validate-npm-owners.yml

name: Validate owners of packages on npm

on:
  workflow_dispatch: {}
  schedule:
    - cron: '0 8 * * *' # 8:00 AM UTC time every day

jobs:
  validate-npm-owners:
    if: github.repository == 'expo/expo'
    runs-on: ubuntu-24.04
    steps:
      - name: 👀 Checkout
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
      - name: ➕ Add `bin` to GITHUB_PATH
        run: echo "$(pwd)/bin" >> $GITHUB_PATH
      - name: 🔨 Install pnpm
        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6
        with:
          version: 10
      - name: 🔨 Setup Node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
        with:
          node-version: 22
          cache: 'pnpm'
      - name: 📦 Install dependencies
        run: pnpm install --ignore-scripts --frozen-lockfile
      - name: ♻️ Restore caches
        uses: ./.github/actions/expo-caches
        id: expo-caches
      - name: 🔎 Validate
        run: pnpm expotools validate-npm-owners
        env:
          NPM_TOKEN_READ_ONLY: ${{ secrets.NPM_TOKEN_READ_ONLY }}
      - name: 🔔 Notify on Slack
        uses: ./.github/actions/slack-notify
        if: failure()
        with:
          webhook: ${{ secrets.slack_webhook_api }}
          author_name: Validate npm owners