@sigstore/tuf

npmv4.0.2

Client for the Sigstore TUF repository

License Apache-2.018 versions1 maintainers2 deps8,696,380 weekly dl
sigstore/sigstore-js
73
/ 100
Health
safe to use

@sigstore/[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100
20/25
maintenance
17/20
popularity
25/25
security
9/15
maturity
2/15
community
Vulnerabilities
0
none known

Bundle & TypeScript

🌟

TypeScript

10/10typed
bundled

Health History

Dependency Tree

License Audit

Dependencies (2)
@sigstore/protobuf-specstuf-js
API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@sigstore/tuf
More from npm
semverminimatchdebugstrip-ansiansi-regexms
Browse all npm packages →

First published · 2023-06-06T15:15:03.118Z

Last updated · 2026-03-18T19:52:09.099Z