fix: add repository field to published packages for provenance validation (#2158)

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: ryansolid

packages/start-nitro-v2-vite-plugin/package.json

@@ -3,6 +3,11 @@
   "description": "Nitro v2 plugin for development with SolidStart 2.0",
   "version": "0.3.0",
   "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/solidjs/solid-start.git",
+    "directory": "packages/start-nitro-v2-vite-plugin"
+  },
   "scripts": {
     "build": "tsc",
     "typecheck": "tsc --noEmit",

packages/start/package.json

@@ -2,6 +2,11 @@
   "name": "@solidjs/start",
   "version": "2.0.0-alpha.3",
   "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/solidjs/solid-start.git",
+    "directory": "packages/start"
+  },
   "scripts": {
     "build": "pnpm validate-imports && tsc && node scripts/build.js",
     "dev": "tsc --watch",