main workflow with opt out of npm and github update