@sigstore/sign

npmv4.1.1

Sigstore signing library

License Apache-2.016 versions1 maintainers6 deps8,595,585 weekly dl
sigstore/sigstore-js
73
/ 100
Health
safe to use

@sigstore/[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100
20/25
maintenance
17/20
popularity
25/25
security
9/15
maturity
2/15
community
Vulnerabilities
0
none known

Bundle & TypeScript

📦

Bundle Size

379.4 KBminified
101.7 KB gzipped
6 direct dependencies
side effectsscoped
🌟

TypeScript

10/10typed
bundled

Health History

Dependency Tree

License Audit

Dependencies (6)
@sigstore/bundle@sigstore/core@sigstore/protobuf-specsmake-fetch-happenproc-log@gar/promise-retry
API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@sigstore/sign
More from npm
strip-ansiansi-regexlru-cachemschalksupports-color
Browse all npm packages →

First published · 2023-08-10T16:18:28.901Z

Last updated · 2026-03-18T19:52:09.278Z