On 2 November 2026 n8n verified our community node, n8n-nodes-prisma-reviews. Verified means it shows up in the nodes panel of n8n Cloud and can be dragged onto the canvas with no install step. Here is what the process asked of us, in case you are building one.

1. Use the official CLI from day one

@n8n/node-cli gives you n8n-node build, n8n-node lint and n8n-node release. The linter is stricter than you expect: options must be sorted alphabetically by name, descriptions follow n8n's style, and credentials need a test request. Fixing lint at the end is painful; run it on every commit (we run it in CI on every push).

2. Publish from GitHub Actions with provenance

Since 1 May 2026 n8n only verifies packages published from GitHub Actions with npm provenance. The CLI can scaffold the workflow (n8n-node release --init-workflow). Our flow now is:

  1. Bump the version and push a tag such as 0.1.3.
  2. The publish.yml workflow runs lint and build and publishes to npm with a signed provenance statement.
  3. n8n picks up new versions on its own and reviews them for the next release cycle, as long as the changes are visible in the public repository.

Packages published from a laptop with npm publish do not get provenance and cannot be verified.

3. Keep the repository and the package in sync

n8n checks that what is on npm matches the public repo. Every version that goes to npm is a commit and a tag on GitHub first, with a CHANGELOG entry.

4. Listen to the community thread

The most useful feature in our latest release came from the n8n forum. A user asked how to tell "no new reviews" apart from "the check failed". We added two webhook events to the API, location.sync_failed (sent once after 3 failed checks in a row) and location.sync_recovered, and version 0.1.3 of the trigger node exposes them. A workflow can now alert on a broken connection instead of staying silent.

What the node does

Prisma Reviews is one API to read and reply to the reviews of businesses and apps you own, on 66 platforms (Google Maps, App Store, Google Play, Judge.me, Yelp, Tripadvisor, Booking.com, G2 and more), in one JSON format. The package has:

  • Prisma Reviews Trigger: starts a workflow on a new or updated review, a published or failed reply, a connection change, or a location whose sync fails or recovers.
  • Prisma Reviews: an action node to list and get reviews, publish replies where the platform allows it, and manage locations and connections.

Typical first workflows: a Slack message for every new review, an alert to the manager on 1 and 2 star reviews, and a Google Sheet with every review of the month. The node never writes replies itself; it publishes the exact text your workflow passes.

Setup guide: https://prismareviews.com/n8n-reviews · Node page on n8n: https://n8n.io/integrations/prisma-reviews/

If you are going through verification and get stuck on lint or provenance, ask in the comments.