fix(deps): remove tempy

index.js

@@ -1,6 +1,7 @@
 import { castArray, defaultTo } from "lodash-es";
+import os from "os";
+import path from "path";
 import AggregateError from "aggregate-error";
-import { temporaryFile } from "tempy";
 import getPkg from "./lib/get-pkg.js";
 import verifyNpmConfig from "./lib/verify-config.js";
 import verifyNpmAuth from "./lib/verify-auth.js";
@@ -10,7 +11,10 @@ import publishNpm from "./lib/publish.js";
 
 let verified;
 let prepared;
-const npmrc = temporaryFile({ name: ".npmrc" });
+
+const tempDir = os.tmpdir();
+
+const npmrc = path.join(tempDir, ".npmrc");
 
 export async function verifyConditions(pluginConfig, context) {
   // If the npm publish plugin is used and has `npmPublish`, `tarballDir` or `pkgRoot` configured, validate them now in order to prevent any release if the configuration is wrong

package.json

@@ -30,8 +30,7 @@
     "rc": "^1.2.8",
     "read-pkg": "^9.0.0",
     "registry-auth-token": "^5.0.0",
-    "semver": "^7.1.2",
-    "tempy": "^3.0.0"
+    "semver": "^7.1.2"
   },
   "devDependencies": {
     "ava": "6.2.0",