From bed85569758fa5294711eee34e54f265c67a0685 Mon Sep 17 00:00:00 2001
From: askalf <263217947+askalf@users.noreply.github.com>
Date: Sat, 11 Jul 2026 12:56:22 -0400
Subject: [PATCH] =?UTF-8?q?docs(readme):=20reflect=20npm=20availability=20?=
 =?UTF-8?q?=E2=80=94=20package=20is=20published?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 40e48a3..b1b0be4 100644
--- a/README.md
+++ b/README.md
@@ -20,11 +20,11 @@ Deterministic and offline. truecopy shares **[redstamp](https://github.com/askal
 ## Install
 
 ```bash
-npm i -g github:askalf/truecopy          # latest
-npm i -g github:askalf/truecopy#v0.6.1   # pinned release
+npm i -g @askalf/truecopy                # latest, from npm
+npm i -g @askalf/truecopy@0.8.0          # pinned release
 ```
 
-> Not yet on npm — installs straight from GitHub (or prefix any command below with `npx -y github:askalf/truecopy`).
+> Also installable straight from GitHub: `npm i -g github:askalf/truecopy`. Every command below runs one-shot with `npx -y @askalf/truecopy` (or `npx -y github:askalf/truecopy`).
 
 ## Quick start
 
@@ -159,7 +159,7 @@ Trust comes from three sources, unioned: your own machine's key (implicit, so a
 
 ## In CI
 
-> Not yet on npm — installs straight from GitHub.
+> On npm as `@askalf/truecopy` — the snippets below use the GitHub form, but `npx -y @askalf/truecopy verify` works the same.
 
 **Verify everywhere** — the gate. Public key only, no secret: