Publish a package to the central registry

Every VibeVM project can install packages from two public places: the organisation `vibespecs` on GitHub and the organisation of the same name on GitVerse. Only their administrators can add a package there, so to publish yours, you ask them. This page shows how to ask, and what can keep a package out.

Check that the in-tree package org.acme/review-notes of this project, the slot vibevm/vibepacks/org.acme/review-notes/v0.1.0, is ready for the central registry, then write the message that asks to add it, for the Add package topic of the VibeVM chat. The platform is GitHub; my username there is octocat. Send nothing. the vibevm skill installed for your agent; no network the agent names anything the package still lacks, such as an empty description, and shows a short message with the package's group and name, the platform and your username, ready to paste into Telegram vibe validate

The agent reads the package's [manifest](../glossary/index.xml#manifest) and checks what a stranger who installs it will see: the group and the name, the version, the license and a one-line description. It runs `vibe validate` to make sure the project around the package is sound. Then it writes a message of three lines: the package's group and name, the platform, and your username there. The agent sends nothing. You paste the message into the topic yourself, because the request is yours, and so is the account.

1. Open the Add package topic of the VibeVM chat in Telegram: [t.me/vibevm_chat/9](https://t.me/vibevm_chat/9).

2. Name the package: its group and its name, such as `org.acme/review-notes`.

3. Name the platform where the package should live: GitHub or GitVerse. If you name none, it is GitHub.

4. Give your username on that platform, as the package's maintainer.

Once that account can write to the package's repository, you publish its versions yourself, as [Publish a package](publish-a-package.xml) shows.

A [registry](../glossary/index.xml#registry) in VibeVM is a hosting organisation where every package is its own git repository. The central one is the pair that every machine trusts by default: `https://github.com/vibespecs` and `https://gitverse.ru/vibespecs`. The first time vibe runs, it writes both into the list of registries it keeps for the whole machine, so every project installs from them without setup.

The names of a package, its group and its own name, can be covered by someone's copyright, or be barred from publication for another reason. Such a package can be refused, or removed after it was published.

The administration of the central registry reserves the right to refuse any package, to delete any package from it, and to take other administrative actions with any package. These actions must not contradict the law. Which law applies is described on [Applicable law](../legal/applicable-law.xml).

If you need a place you control, or a private one, publish to a registry of your own, as [Publish a package](publish-a-package.xml) shows. Nobody has to approve a package there.