# X_TRUST_PUBLISHER_MISSING

## Means

a published package has no OIDC trusted publisher

## Typical cause

a package added after the trust rollout, or a config revoked on npmjs.com — release day then falls back to token auth, which this repo has no token for

## Fix

`bun run scripts/trust-publishers.ts`

[CLI and verify](/error-codes#cli-and-verify)