{"_id":"sigstore","_rev":"4130678","name":"sigstore","description":"code-signing for npm packages","dist-tags":{"latest":"4.1.0"},"maintainers":[{"name":"bdehamer","email":""}],"time":{"modified":"2026-03-01T18:32:39.000Z","created":"2022-08-08T20:42:14.515Z","4.1.0":"2025-12-19T16:54:56.285Z","4.0.0":"2025-07-29T23:16:47.737Z","3.1.0":"2025-02-04T20:35:48.753Z","3.0.0":"2024-10-14T16:13:47.295Z","2.3.1":"2024-05-16T17:12:04.121Z","2.3.0":"2024-04-04T19:41:29.992Z","2.2.2":"2024-02-15T18:03:30.923Z","2.2.1":"2024-02-08T23:12:03.013Z","2.2.0":"2024-01-12T20:56:35.290Z","2.1.0":"2023-08-29T15:40:24.449Z","2.0.0":"2023-08-18T16:05:36.578Z","1.9.0":"2023-08-10T16:18:29.177Z","1.8.0":"2023-07-19T16:10:35.102Z","1.7.0":"2023-06-30T16:36:30.438Z","1.6.0":"2023-06-06T15:15:03.866Z","1.5.2":"2023-05-16T13:34:05.153Z","1.5.1":"2023-05-15T16:26:50.515Z","1.5.0":"2023-05-11T16:38:50.108Z","1.4.0":"2023-04-24T15:26:24.376Z","1.3.2":"2023-04-20T12:37:07.661Z","1.3.1":"2023-04-20T08:34:16.165Z","1.3.0":"2023-04-18T17:45:13.480Z","1.2.0":"2023-03-23T17:41:35.152Z","1.1.1":"2023-03-14T19:36:31.420Z","1.1.0":"2023-03-14T16:36:08.594Z","1.0.0":"2023-02-09T17:56:01.499Z","1.0.0-beta.1":"2023-02-08T16:58:58.889Z","0.4.0":"2023-01-11T17:31:53.707Z","0.3.0":"2023-01-05T19:23:22.511Z","0.2.0":"2022-12-08T16:18:41.107Z","0.1.1":"2022-12-01T17:15:22.640Z","0.1.0":"2022-11-30T18:40:06.568Z","0.0.1-alpha.5":"2022-11-15T18:15:38.309Z","0.0.1-alpha.4":"2022-11-01T16:33:51.539Z","0.0.1-alpha.3":"2022-10-31T19:24:41.268Z","0.0.1-alpha.2":"2022-10-24T17:32:30.023Z","0.0.1-alpha.1":"2022-09-08T16:45:17.055Z","0.0.0":"2022-08-08T20:42:14.515Z"},"users":{},"author":{"name":"bdehamer@github.com"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"versions":{"4.1.0":{"name":"sigstore","version":"4.1.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^4.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.11.0","@tufjs/repo-mock":"^4.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/bundle":"^4.0.0","@sigstore/core":"^3.1.0","@sigstore/protobuf-specs":"^0.5.0","@sigstore/sign":"^4.1.0","@sigstore/tuf":"^4.0.1","@sigstore/verify":"^3.1.0"},"engines":{"node":"^20.17.0 || >=22.9.0"},"gitHead":"c4ad6141eb947a20690837888e5d90d9a30b5af3","_id":"sigstore@4.1.0","_nodeVersion":"24.12.0","_npmVersion":"11.6.2","dist":{"shasum":"d34b92a544a05e003a2430209d26d8dfafd805a0","size":10154,"noattachment":false,"key":"/sigstore/-/sigstore-4.1.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-4.1.0.tgz"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a123e7c7-98a7-4464-911d-09fa7c394dd1"}},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/sigstore_4.1.0_1766163296133_0.10887315606810755"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2025-12-19T16:54:56.285Z","publish_time":1766163296285,"_source_registry_name":"default","_cnpm_publish_time":1766163296285},"4.0.0":{"name":"sigstore","version":"4.0.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^4.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.11.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/bundle":"^4.0.0","@sigstore/core":"^3.0.0","@sigstore/protobuf-specs":"^0.5.0","@sigstore/sign":"^4.0.0","@sigstore/tuf":"^4.0.0","@sigstore/verify":"^3.0.0"},"engines":{"node":"^20.17.0 || >=22.9.0"},"_id":"sigstore@4.0.0","gitHead":"21dd66d041593ad5d9fc2fe461131d8db868ad6f","_nodeVersion":"20.19.4","_npmVersion":"11.5.1","dist":{"shasum":"cc260814a95a6027c5da24b819d5c11334af60f9","size":10117,"noattachment":false,"key":"/sigstore/-/sigstore-4.0.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-4.0.0.tgz"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a123e7c7-98a7-4464-911d-09fa7c394dd1"}},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/sigstore_4.0.0_1753831007549_0.9928122846337526"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2025-07-29T23:16:47.737Z","publish_time":1753831007737,"_source_registry_name":"default","_cnpm_publish_time":1753831007737},"3.1.0":{"name":"sigstore","version":"3.1.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^3.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.10.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/bundle":"^3.1.0","@sigstore/core":"^2.0.0","@sigstore/protobuf-specs":"^0.4.0","@sigstore/sign":"^3.1.0","@sigstore/tuf":"^3.1.0","@sigstore/verify":"^2.1.0"},"engines":{"node":"^18.17.0 || >=20.5.0"},"_id":"sigstore@3.1.0","gitHead":"06cd267cbdc2eeaa04294995622db9f6ad2fa7cf","_nodeVersion":"18.17.0","_npmVersion":"10.9.2","dist":{"shasum":"08dc6c0c425263e9fdab85ffdb6477550e2c511d","size":10123,"noattachment":false,"key":"/sigstore/-/sigstore-3.1.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-3.1.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/sigstore_3.1.0_1738701348554_0.34926300164624946"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2025-02-04T20:35:48.753Z","publish_time":1738701348753,"_source_registry_name":"default","_cnpm_publish_time":1738701348753},"3.0.0":{"name":"sigstore","version":"3.0.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^3.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.8.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/bundle":"^3.0.0","@sigstore/core":"^2.0.0","@sigstore/protobuf-specs":"^0.3.2","@sigstore/sign":"^3.0.0","@sigstore/tuf":"^3.0.0","@sigstore/verify":"^2.0.0"},"engines":{"node":"^18.17.0 || >=20.5.0"},"_id":"sigstore@3.0.0","gitHead":"3a57a741bfb9f7c3bca69b63e170fc28e9432e69","_nodeVersion":"18.17.0","_npmVersion":"10.9.0","dist":{"shasum":"d6eadcc6590185a7f1c16184078ce8a9ef6db937","size":10006,"noattachment":false,"key":"/sigstore/-/sigstore-3.0.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-3.0.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_3.0.0_1728922427023_0.6472768877895789"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2024-10-14T16:13:47.295Z","publish_time":1728922427295,"_source_registry_name":"default","_cnpm_publish_time":1728922427295},"2.3.1":{"name":"sigstore","version":"2.3.1","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^2.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.7.4","@tufjs/repo-mock":"^2.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/bundle":"^2.3.2","@sigstore/core":"^1.0.0","@sigstore/protobuf-specs":"^0.3.2","@sigstore/sign":"^2.3.2","@sigstore/tuf":"^2.3.4","@sigstore/verify":"^1.2.1"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"sigstore@2.3.1","gitHead":"46e7056ff9912ebfee5298d94024895a9fea76c0","_nodeVersion":"18.17.0","_npmVersion":"10.8.0","dist":{"shasum":"0755dd2cc4820f2e922506da54d3d628e13bfa39","size":9891,"noattachment":false,"key":"/sigstore/-/sigstore-2.3.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-2.3.1.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_2.3.1_1715879523936_0.376373489774124"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2024-05-16T17:12:04.121Z","publish_time":1715879524121,"_source_registry_name":"default","_cnpm_publish_time":1715879524121},"2.3.0":{"name":"sigstore","version":"2.3.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^2.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.7.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/bundle":"^2.3.1","@sigstore/core":"^1.0.0","@sigstore/protobuf-specs":"^0.3.1","@sigstore/sign":"^2.3.0","@sigstore/tuf":"^2.3.1","@sigstore/verify":"^1.2.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"sigstore@2.3.0","gitHead":"518dfb016e8857990b15edf6dfc364c85fcbd610","_nodeVersion":"18.17.0","_npmVersion":"10.5.1","dist":{"shasum":"c56b32818d4dc989f6ea3c0897f4d9bff5d14bed","size":9885,"noattachment":false,"key":"/sigstore/-/sigstore-2.3.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-2.3.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_2.3.0_1712259689853_0.9508144665968301"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2024-04-04T19:41:29.992Z","publish_time":1712259689992,"_source_registry_name":"default","_cnpm_publish_time":1712259689992},"2.2.2":{"name":"sigstore","version":"2.2.2","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^2.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.6.5","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/bundle":"^2.2.0","@sigstore/core":"^1.0.0","@sigstore/protobuf-specs":"^0.3.0","@sigstore/sign":"^2.2.3","@sigstore/tuf":"^2.3.1","@sigstore/verify":"^1.1.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"sigstore@2.2.2","gitHead":"700c78d4e5879c2f4764cc45a89f477106db5ef6","_nodeVersion":"18.17.0","_npmVersion":"10.4.0","dist":{"shasum":"5e4ff39febeae9e0679bafa22180cb0f445a7e35","size":9887,"noattachment":false,"key":"/sigstore/-/sigstore-2.2.2.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-2.2.2.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_2.2.2_1708020210803_0.02465369903266379"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2024-02-15T18:03:30.923Z","publish_time":1708020210923,"_source_registry_name":"default","_cnpm_publish_time":1708020210923},"2.2.1":{"name":"sigstore","version":"2.2.1","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^2.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.6.4","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/bundle":"^2.1.1","@sigstore/core":"^1.0.0","@sigstore/protobuf-specs":"^0.2.1","@sigstore/sign":"^2.2.2","@sigstore/tuf":"^2.3.0","@sigstore/verify":"^1.0.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"gitHead":"f25501d2f480511a28fab9faee80f15b92f86673","_id":"sigstore@2.2.1","_nodeVersion":"18.17.0","_npmVersion":"9.6.7","dist":{"shasum":"a0f9f6b7f39aef5d9b3d659cd14b99a502fb44b0","size":9885,"noattachment":false,"key":"/sigstore/-/sigstore-2.2.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-2.2.1.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_2.2.1_1707433922824_0.03769461979443145"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2024-02-08T23:12:03.013Z","publish_time":1707433923013,"_source_registry_name":"default","_cnpm_publish_time":1707433923013},"2.2.0":{"name":"sigstore","version":"2.2.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^2.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.6.3","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/bundle":"^2.1.1","@sigstore/core":"^0.2.0","@sigstore/protobuf-specs":"^0.2.1","@sigstore/sign":"^2.2.1","@sigstore/tuf":"^2.3.0","@sigstore/verify":"^0.1.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"sigstore@2.2.0","gitHead":"d9093d4b3b99d9ee446633ac7074e43cea78c727","_nodeVersion":"18.17.0","_npmVersion":"10.3.0","dist":{"shasum":"acba5f73ca2158d2b0507bc52d3592149c3ed20e","size":9887,"noattachment":false,"key":"/sigstore/-/sigstore-2.2.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-2.2.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_2.2.0_1705092995140_0.7135357784921066"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2024-01-12T20:56:35.290Z","publish_time":1705092995290,"_source_registry_name":"default","_cnpm_publish_time":1705092995290},"2.1.0":{"name":"sigstore","version":"2.1.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^2.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.4.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/bundle":"^2.1.0","@sigstore/protobuf-specs":"^0.2.1","@sigstore/sign":"^2.1.0","@sigstore/tuf":"^2.1.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"sigstore@2.1.0","gitHead":"26d16513386ffaa790b1c32f927544f1322e4194","_nodeVersion":"16.20.2","_npmVersion":"9.8.1","dist":{"shasum":"c577b596642b3f360dc4135d476466e6edeb2364","size":37137,"noattachment":false,"key":"/sigstore/-/sigstore-2.1.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-2.1.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_2.1.0_1693323624209_0.622695855342287"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-08-29T15:40:24.449Z","publish_time":1693323624449,"_source_registry_name":"default","_cnpm_publish_time":1693323624449},"2.0.0":{"name":"sigstore","version":"2.0.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^2.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.3.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/bundle":"^2.0.0","@sigstore/protobuf-specs":"^0.2.1","@sigstore/sign":"^2.0.0","@sigstore/tuf":"^2.0.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"sigstore@2.0.0","gitHead":"f0b49a04e5a62250e0f60fb128004a73110fe311","_nodeVersion":"16.20.2","_npmVersion":"9.8.1","dist":{"shasum":"dbef27b7040fa8d0351fa9aacc48e63adbf030b2","size":37200,"noattachment":false,"key":"/sigstore/-/sigstore-2.0.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-2.0.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_2.0.0_1692374736273_0.6974853877323335"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-08-18T16:05:36.578Z","publish_time":1692374736578,"_source_registry_name":"default","_cnpm_publish_time":1692374736578},"1.9.0":{"name":"sigstore","version":"1.9.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"bin":{"sigstore":"bin/sigstore.js"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^1.0.0","@sigstore/jest":"^0.0.0","@sigstore/mock":"^0.2.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/bundle":"^1.1.0","@sigstore/protobuf-specs":"^0.2.0","@sigstore/sign":"^1.0.0","@sigstore/tuf":"^1.0.3","make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"_id":"sigstore@1.9.0","gitHead":"591db8d9680e29e96813df1d49ce44529385b433","_nodeVersion":"16.20.1","_npmVersion":"9.8.1","dist":{"shasum":"1e7ad8933aa99b75c6898ddd0eeebc3eb0d59875","size":43897,"noattachment":false,"key":"/sigstore/-/sigstore-1.9.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.9.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.9.0_1691684308861_0.6057868233173072"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-08-10T16:18:29.177Z","publish_time":1691684309177,"_source_registry_name":"default","_cnpm_publish_time":1691684309177},"1.8.0":{"name":"sigstore","version":"1.8.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"bin":{"sigstore":"bin/sigstore.js"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^1.0.0","@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/bundle":"^1.0.0","@sigstore/protobuf-specs":"^0.2.0","@sigstore/tuf":"^1.0.3","make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"_id":"sigstore@1.8.0","gitHead":"8d69554570934c3f82fad8eda929ec36f5d12262","_nodeVersion":"16.20.1","_npmVersion":"9.8.0","dist":{"shasum":"f790120697fa7c89f4418598ce59e638ff680aa5","size":52767,"noattachment":false,"key":"/sigstore/-/sigstore-1.8.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.8.0.tgz"},"_npmUser":{"name":"mylesborins","email":"myles.borins@gmail.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.8.0_1689783034897_0.6219536619029546"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-07-19T16:10:35.102Z","publish_time":1689783035102,"_source_registry_name":"default","_cnpm_publish_time":1689783035102},"1.7.0":{"name":"sigstore","version":"1.7.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"bin":{"sigstore":"bin/sigstore.js"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^1.0.0","@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","@sigstore/tuf":"^1.0.1","make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"ebdcfdfbdfeb9c9aeee6df53674ef230613629f5","_id":"sigstore@1.7.0","_nodeVersion":"16.20.1","_npmVersion":"9.7.2","dist":{"shasum":"9186e6c8ce1ab0cba5d97b414212d40f0a01564e","size":52099,"noattachment":false,"key":"/sigstore/-/sigstore-1.7.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.7.0.tgz"},"_npmUser":{"name":"mylesborins","email":"myles.borins@gmail.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.7.0_1688142990259_0.2814298784638234"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-06-30T16:36:30.438Z","publish_time":1688142990438,"_source_registry_name":"default","_cnpm_publish_time":1688142990438},"1.6.0":{"name":"sigstore","version":"1.6.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"bin":{"sigstore":"bin/sigstore.js"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/rekor-types":"^1.0.0","@total-typescript/shoehorn":"^0.1.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0","@types/sigstore-jest-extended":"^0.0.0","@types/node":"^20.2.5","json-schema-to-typescript":"^13.0.0","nock":"^13.2.4","shx":"^0.3.3","typescript":"^5.1.3"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","@sigstore/tuf":"^1.0.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.1.3"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"c78bc0f6d2e257e0e6c603ebb6fa67ff1d52a53b","_id":"sigstore@1.6.0","_nodeVersion":"16.20.0","_npmVersion":"9.6.7","dist":{"shasum":"887a4007c6ee83f3ef3fd844be1a0840e849c301","size":54074,"noattachment":false,"key":"/sigstore/-/sigstore-1.6.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.6.0.tgz"},"_npmUser":{"name":"mylesborins","email":"myles.borins@gmail.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.6.0_1686064503650_0.8348011107117497"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-06-06T15:15:03.866Z","publish_time":1686064503866,"_source_registry_name":"default","_cnpm_publish_time":1686064503866},"1.5.2":{"name":"sigstore","version":"1.5.2","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc --build","test":"jest"},"bin":{"sigstore":"bin/sigstore.js"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@total-typescript/shoehorn":"^0.1.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^20.0.0","json-schema-to-typescript":"^13.0.0","nock":"^13.2.4","typescript":"^5.0.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.1.3"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"e4386f1a68bfddab0aff9d1d3fd051e3d1deaa43","_id":"sigstore@1.5.2","_nodeVersion":"16.20.0","_npmVersion":"9.6.6","dist":{"shasum":"8d4c2a549341211cb08c687999843edc48c1a94c","size":57232,"noattachment":false,"key":"/sigstore/-/sigstore-1.5.2.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.5.2.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.5.2_1684244044896_0.47872849196983736"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-05-16T13:34:05.153Z","publish_time":1684244045153,"_source_registry_name":"default","_cnpm_publish_time":1684244045153},"1.5.1":{"name":"sigstore","version":"1.5.1","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc --build","test":"jest"},"bin":{"sigstore":"bin/sigstore.js"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","publishConfig":{"provenance":true},"devDependencies":{"@total-typescript/shoehorn":"^0.1.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^20.0.0","json-schema-to-typescript":"^13.0.0","nock":"^13.2.4","typescript":"^5.0.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.1.3"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"404f16748e9b8d6768576110703b2674d1978797","_id":"sigstore@1.5.1","_nodeVersion":"16.20.0","_npmVersion":"9.6.6","dist":{"shasum":"92b9e371a37d1f53d3baa991a2c63b89bbe3cee5","size":57127,"noattachment":false,"key":"/sigstore/-/sigstore-1.5.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.5.1.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.5.1_1684168010265_0.0887894942923606"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-05-15T16:26:50.515Z","publish_time":1684168010515,"_source_registry_name":"default","_cnpm_publish_time":1684168010515},"1.5.0":{"name":"sigstore","version":"1.5.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","release":"npm run build && changeset publish","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"publishConfig":{"provenance":true},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@changesets/cli":"^2.26.0","@total-typescript/shoehorn":"^0.1.0","@tsconfig/node14":"^1.0.3","@tufjs/repo-mock":"^1.1.0","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^20.0.0","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^13.0.0","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^5.0.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.1.3"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"b83096d2e93b10ff41b62133831c6e345877560b","_id":"sigstore@1.5.0","_nodeVersion":"16.20.0","_npmVersion":"9.6.6","dist":{"shasum":"795e44b8e9ab0089daa90eff792a831ba87ffe9c","size":58178,"noattachment":false,"key":"/sigstore/-/sigstore-1.5.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.5.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.5.0_1683823129851_0.9558511847741089"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-05-11T16:38:50.108Z","publish_time":1683823130108,"_source_registry_name":"default","_cnpm_publish_time":1683823130108},"1.4.0":{"name":"sigstore","version":"1.4.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","release":"npm run build && changeset publish","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"publishConfig":{"provenance":true},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@changesets/cli":"^2.26.0","@total-typescript/shoehorn":"^0.1.0","@tsconfig/node14":"^1.0.3","@tufjs/repo-mock":"^1.1.0","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^12.0.0","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^5.0.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.1.3"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"b4e96a2df70abbcb0cc210f50568de04d46c23e8","_id":"sigstore@1.4.0","_nodeVersion":"16.20.0","_npmVersion":"9.6.5","dist":{"shasum":"2e3a28c08b1b8246744c27cfb179c525c3f164d8","size":56238,"noattachment":false,"key":"/sigstore/-/sigstore-1.4.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.4.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.4.0_1682349984197_0.7740091839465444"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-04-24T15:26:24.376Z","publish_time":1682349984376,"_cnpm_publish_time":1682349984376},"1.3.2":{"name":"sigstore","version":"1.3.2","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","release":"npm run build && changeset publish","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"publishConfig":{"provenance":true},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@changesets/cli":"^2.26.0","@tsconfig/node14":"^1.0.3","@tufjs/repo-mock":"^1.1.0","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^12.0.0","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^5.0.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.1.3"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"82f1f65c08faaa29ebc3b0a8186fe87b05772d82","_id":"sigstore@1.3.2","_nodeVersion":"16.20.0","_npmVersion":"9.6.5","dist":{"shasum":"2f70ec3e1192911484d9d148ecd9c98345cd172d","size":55703,"noattachment":false,"key":"/sigstore/-/sigstore-1.3.2.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.3.2.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.3.2_1681994227490_0.672109128121039"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-04-20T12:37:07.661Z","publish_time":1681994227661,"_cnpm_publish_time":1681994227661},"1.3.1":{"name":"sigstore","version":"1.3.1","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","release":"npm run build && changeset publish","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"publishConfig":{"provenance":true},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@changesets/cli":"^2.26.0","@tsconfig/node14":"^1.0.3","@tufjs/repo-mock":"^1.1.0","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^12.0.0","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^5.0.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.1.3"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"5e476eea4dfbb8b52ee906943644cb4c1c2db1d2","_id":"sigstore@1.3.1","_nodeVersion":"16.20.0","_npmVersion":"9.6.5","dist":{"shasum":"355aea461e704d22fcbc1e300516be9d05827836","size":55660,"noattachment":false,"key":"/sigstore/-/sigstore-1.3.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.3.1.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.3.1_1681979655995_0.8642541891521918"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-04-20T08:34:16.165Z","publish_time":1681979656165,"_cnpm_publish_time":1681979656165},"1.3.0":{"name":"sigstore","version":"1.3.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","release":"npm run build && changeset publish","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"publishConfig":{"provenance":true},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@changesets/cli":"^2.26.0","@tsconfig/node14":"^1.0.3","@tufjs/repo-mock":"^1.1.0","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^12.0.0","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^5.0.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.1.3"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"dae8bd8eb433a4147b4655c00fe73e0f22bc0fb1","_id":"sigstore@1.3.0","_nodeVersion":"16.20.0","_npmVersion":"9.6.4","dist":{"shasum":"cfcb636ff5ef3df1dafb34552ef1ee5e72be1a83","size":55623,"noattachment":false,"key":"/sigstore/-/sigstore-1.3.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.3.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.3.0_1681839913289_0.8672216165333158"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-04-18T17:45:13.480Z","publish_time":1681839913480,"_cnpm_publish_time":1681839913480},"1.2.0":{"name":"sigstore","version":"1.2.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","release":"npm run build && changeset publish","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"publishConfig":{"provenance":true},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@changesets/cli":"^2.26.0","@tsconfig/node14":"^1.0.3","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^12.0.0","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^5.0.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.0.0"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"5b8c0801d1f5d105351a403f58c38269de93f680","_id":"sigstore@1.2.0","_nodeVersion":"16.19.1","_npmVersion":"9.6.2","dist":{"shasum":"ae5b31dac75c2d31e7873897e2862f0d0b205bce","size":53822,"noattachment":false,"key":"/sigstore/-/sigstore-1.2.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.2.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.2.0_1679593295006_0.8498377286094203"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-03-23T17:41:35.152Z","publish_time":1679593295152,"_cnpm_publish_time":1679593295152},"1.1.1":{"name":"sigstore","version":"1.1.1","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","release":"npm run build && changeset publish","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"publishConfig":{"provenance":true},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@changesets/cli":"^2.26.0","@tsconfig/node14":"^1.0.3","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^12.0.0","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^4.7.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.0.0"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"dd9790b4a261af4916f34d3359c26dae2628e398","_id":"sigstore@1.1.1","_nodeVersion":"16.19.1","_npmVersion":"9.6.1","dist":{"shasum":"751a709a7467ca54dcb2e81e36d67cfdcf5ca546","size":53927,"noattachment":false,"key":"/sigstore/-/sigstore-1.1.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.1.1.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.1.1_1678822591249_0.782500193313894"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-03-14T19:36:31.420Z","publish_time":1678822591420,"_cnpm_publish_time":1678822591420},"1.1.0":{"name":"sigstore","version":"1.1.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","release":"npm run build && changeset publish","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"publishConfig":{"provenance":true},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@changesets/cli":"^2.26.0","@tsconfig/node14":"^1.0.3","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^12.0.0","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^4.7.2"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","make-fetch-happen":"^11.0.1","tuf-js":"^1.0.0"},"bundleDependencies":["@sigstore/protobuf-specs"],"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"88311026d4bb08fe1a0688c3bd85329d8c95cb30","_id":"sigstore@1.1.0","_nodeVersion":"16.19.1","_npmVersion":"9.6.1","dist":{"shasum":"55bd590e1b49a64e1b13f3ee27b129b7e2fd8e31","size":91049,"noattachment":false,"key":"/sigstore/-/sigstore-1.1.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.1.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.1.0_1678811768365_0.7556401876512064"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-03-14T16:36:08.594Z","publish_time":1678811768594,"_cnpm_publish_time":1678811768594},"1.0.0":{"name":"sigstore","version":"1.0.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:sigstore":"./hack/generate-sigstore-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node14":"^1.0.3","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1","tuf-js":"^1.0.0"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"06528997c3c8ab9f864fad9a3658446aca7fd86d","_id":"sigstore@1.0.0","_nodeVersion":"16.19.0","_npmVersion":"9.4.2","dist":{"shasum":"3c7a8bbacf99d0f978276bd29bd94911006b72c7","size":91196,"noattachment":false,"key":"/sigstore/-/sigstore-1.0.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.0.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.0.0_1675965361270_0.5333363842953731"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-02-09T17:56:01.499Z","publish_time":1675965361499,"_cnpm_publish_time":1675965361499},"1.0.0-beta.1":{"name":"sigstore","version":"1.0.0-beta.1","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:sigstore":"./hack/generate-sigstore-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node14":"^1.0.3","@types/jest":"^29.4.0","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^29.4.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^29.0.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1","tuf-js":"1.0.0-beta.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"1e3b0bd8c11b1d074e0722e97408b86f162f5416","_id":"sigstore@1.0.0-beta.1","_nodeVersion":"16.19.0","_npmVersion":"9.2.0","dist":{"shasum":"c4ced7a56a1293e4b1f01a57021dc2d718b69a98","size":91202,"noattachment":false,"key":"/sigstore/-/sigstore-1.0.0-beta.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-1.0.0-beta.1.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_1.0.0-beta.1_1675875538593_0.8652862406847601"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-02-08T16:58:58.889Z","publish_time":1675875538889,"_cnpm_publish_time":1675875538889},"0.4.0":{"name":"sigstore","version":"0.4.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:sigstore":"./hack/generate-sigstore-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node14":"^1.0.3","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"8a2ee2fd20dda58ffa4a8d808a65cb1e04711c03","_id":"sigstore@0.4.0","_nodeVersion":"16.18.1","_npmVersion":"9.2.0","dist":{"shasum":"a5e5386bd2ad86d7d1f20c3b2083d345c0cced23","size":105970,"noattachment":false,"key":"/sigstore/-/sigstore-0.4.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.4.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.4.0_1673458313440_0.20265580742173928"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-01-11T17:31:53.707Z","publish_time":1673458313707,"_cnpm_publish_time":1673458313707},"0.3.0":{"name":"sigstore","version":"0.3.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:sigstore":"./hack/generate-sigstore-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node14":"^1.0.3","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"867975ea12e93be03a0db6d9290dbdc8545f52f2","_id":"sigstore@0.3.0","_nodeVersion":"16.18.1","_npmVersion":"9.2.0","dist":{"shasum":"c223a53e61261f49b7ea612e60f3bef35a89aedf","size":86437,"noattachment":false,"key":"/sigstore/-/sigstore-0.3.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.3.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.3.0_1672946602258_0.9696518635344258"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-01-05T19:32:59.644Z","publish_time":1672946602511,"_cnpm_publish_time":1672946602511},"0.2.0":{"name":"sigstore","version":"0.2.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:bundle":"./hack/generate-bundle-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node14":"^1.0.3","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"83811fedfd89fabec5408ccca5faff8631b23255","_id":"sigstore@0.2.0","_nodeVersion":"16.18.1","_npmVersion":"9.1.3","dist":{"shasum":"264d4b3af27fbf06d74c8458782a9ff823543202","size":51194,"noattachment":false,"key":"/sigstore/-/sigstore-0.2.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.2.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.2.0_1670516320812_0.6281646636079237"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-12-08T16:41:11.402Z","publish_time":1670516321107,"_cnpm_publish_time":1670516321107},"0.1.1":{"name":"sigstore","version":"0.1.1","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:bundle":"./hack/generate-bundle-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node12":"^1.0.9","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"39c77abc08e29f7a2ca636198a7c6904d8d2a777","_id":"sigstore@0.1.1","_nodeVersion":"16.18.1","_npmVersion":"8.19.2","dist":{"shasum":"4c1181d676395bfa478a54d0d51f1650b094e23f","size":49784,"noattachment":false,"key":"/sigstore/-/sigstore-0.1.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.1.1.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.1.1_1669914922430_0.39040781744412834"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-12-01T17:18:08.063Z","publish_time":1669914922640,"_cnpm_publish_time":1669914922640},"0.1.0":{"name":"sigstore","version":"0.1.0","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:bundle":"./hack/generate-bundle-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node12":"^1.0.9","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"d62881b2d1e6e82337ef6a699fd14b74a6d0138b","_id":"sigstore@0.1.0","_nodeVersion":"16.18.1","_npmVersion":"8.19.2","dist":{"shasum":"7069093c47658051c21c77c3827baf273a1ea442","size":48851,"noattachment":false,"key":"/sigstore/-/sigstore-0.1.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.1.0.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.1.0_1669833606352_0.4648420067747654"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-11-30T18:44:43.245Z","publish_time":1669833606568,"_cnpm_publish_time":1669833606568},"0.0.1-alpha.5":{"name":"sigstore","version":"0.0.1-alpha.5","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:bundle":"./hack/generate-bundle-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node12":"^1.0.9","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"505f9447406a7f2988e7b85b4e27127edde552af","_id":"sigstore@0.0.1-alpha.5","_nodeVersion":"16.18.0","_npmVersion":"8.19.2","dist":{"shasum":"6c498a40ac85b439ce8bfd8db32cd4a3cc613fca","size":64248,"noattachment":false,"key":"/sigstore/-/sigstore-0.0.1-alpha.5.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.0.1-alpha.5.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.0.1-alpha.5_1668536138115_0.4496647888877383"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-11-15T18:16:30.630Z","publish_time":1668536138309,"_cnpm_publish_time":1668536138309},"0.0.1-alpha.4":{"name":"sigstore","version":"0.0.1-alpha.4","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:bundle":"./hack/generate-bundle-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node12":"^1.0.9","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1"},"gitHead":"47472373b5c6c64b0c3873683f382a8b6a6783ae","_id":"sigstore@0.0.1-alpha.4","_nodeVersion":"16.15.0","_npmVersion":"9.0.1","dist":{"shasum":"0ede24e31ddc3ad6e5f869c045075780c701d68d","size":40980,"noattachment":false,"key":"/sigstore/-/sigstore-0.0.1-alpha.4.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.0.1-alpha.4.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.0.1-alpha.4_1667320431318_0.32943390398724426"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-11-01T16:36:04.879Z","publish_time":1667320431539,"_cnpm_publish_time":1667320431539},"0.0.1-alpha.3":{"name":"sigstore","version":"0.0.1-alpha.3","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:bundle":"./hack/generate-bundle-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node12":"^1.0.9","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1"},"gitHead":"ce5019bc6c97cd71c139457101e0776f2b765855","_id":"sigstore@0.0.1-alpha.3","_nodeVersion":"16.15.0","_npmVersion":"9.0.0-pre.0","dist":{"shasum":"7d37096fa7c30c0bdb953f148f0e36b01c7c4906","size":40952,"noattachment":false,"key":"/sigstore/-/sigstore-0.0.1-alpha.3.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.0.1-alpha.3.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.0.1-alpha.3_1667244281049_0.9734391557241819"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-10-31T19:30:06.414Z","publish_time":1667244281268,"_cnpm_publish_time":1667244281268},"0.0.1-alpha.2":{"name":"sigstore","version":"0.0.1-alpha.2","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\"","codegen:bundle":"./hack/generate-bundle-types","codegen:rekor":"./hack/generate-rekor-types"},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node12":"^1.0.9","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","json-schema-to-typescript":"^11.0.2","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^11.0.1"},"gitHead":"750b832e6849d7ec5db27207438e08547c88ea24","_id":"sigstore@0.0.1-alpha.2","_nodeVersion":"16.15.0","_npmVersion":"9.0.0-pre.0","dist":{"shasum":"cd539c297a1d00199f5bcbb7b94fbd7d7b80252f","size":41514,"noattachment":false,"key":"/sigstore/-/sigstore-0.0.1-alpha.2.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.0.1-alpha.2.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.0.1-alpha.2_1666632749805_0.8824148963206044"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-10-31T19:30:05.412Z","publish_time":1666632750023,"_cnpm_publish_time":1666632750023},"0.0.1-alpha.1":{"name":"sigstore","version":"0.0.1-alpha.1","description":"code-signing for npm packages","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"build":"tsc","test":"jest","test:watch":"jest --watch","test:ci":"jest --maxWorkers=2 --coverage","lint":"eslint --fix --ext .ts src/**","lint:check":"eslint --max-warnings 0 --ext .ts src/**","format":"prettier --write \"src/**/*\""},"bin":{"sigstore":"bin/sigstore.js"},"repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","devDependencies":{"@tsconfig/node12":"^1.0.9","@types/jest":"^27.5.1","@types/make-fetch-happen":"^10.0.0","@types/node":"^18.6.5","@typescript-eslint/eslint-plugin":"^5.26.0","@typescript-eslint/parser":"^5.26.0","eslint":"^8.16.0","eslint-config-prettier":"^8.5.0","eslint-plugin-prettier":"^4.0.0","jest":"^27.5.1","nock":"^13.2.4","prettier":"^2.6.2","ts-jest":"^27.1.5","typescript":"^4.7.2"},"dependencies":{"make-fetch-happen":"^10.1.5"},"gitHead":"448f6e0792be6b1cc69fb4908a5fa2079142e5f8","_id":"sigstore@0.0.1-alpha.1","_nodeVersion":"16.15.0","_npmVersion":"8.5.5","dist":{"shasum":"b3403bbdba49b909166592af3ef5441519fcdec8","size":30318,"noattachment":false,"key":"/sigstore/-/sigstore-0.0.1-alpha.1.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.0.1-alpha.1.tgz"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.0.1-alpha.1_1662655516903_0.9183038186740595"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-09-09T01:12:39.489Z","publish_time":1662655517055,"_cnpm_publish_time":1662655517055},"0.0.0":{"name":"sigstore","version":"0.0.0","description":"code-signing for npm packages","main":"./index.js","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"author":{"name":"GitHub LLC","email":"noreply@github.com"},"license":"Apache-2.0","gitHead":"72be62dec4fd4f2cde06836ca1aa69fc91d9404d","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js#readme","_id":"sigstore@0.0.0","_nodeVersion":"16.16.0","_npmVersion":"8.16.0","dist":{"shasum":"de9d47c51c7fb6a07a9f979e6c4ad7ae824510b7","size":971,"noattachment":false,"key":"/sigstore/-/sigstore-0.0.0.tgz","tarball":"http://registry.cnpm.dingdandao.com/sigstore/download/sigstore-0.0.0.tgz"},"_npmUser":{"name":"mylesborins","email":"myles.borins@gmail.com"},"directories":{},"maintainers":[{"name":"bdehamer","email":""}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/sigstore_0.0.0_1659991334283_0.8420398671558271"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2022-08-08T20:42:18.213Z","publish_time":1659991334515,"_cnpm_publish_time":1659991334515}},"readme":"# sigstore &middot; [![npm version](https://img.shields.io/npm/v/sigstore.svg?style=flat)](https://www.npmjs.com/package/sigstore) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke test](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)\n\nA JavaScript library for generating and verifying Sigstore signatures. One of\nthe intended uses is to sign and verify npm packages but it can be used to sign\nand verify any file.\n\n## Features\n\n- Support for signing using an OpenID Connect identity\n- Support for publishing signatures to a [Rekor][1] instance\n- Support for verifying Sigstore bundles\n\n## Prerequisites\n\n- Node.js version ^20.17.0 || >=22.9.0\n\n## Installation\n\n```\nnpm install sigstore\n```\n\n## Compatibility\n\nThe following table documents which combinations of Sigstore bundle versions\nand Rekor types can be verified by different versions of the `sigstore`\nlibrary. It also lists which `sigstore` versions were shipped with different\n`npm` CLI versions.\n\n<table>\n  <thead>\n    <tr>\n      <th colspan=2><code>sigstore</code></th>\n      <th>1.0</th>\n      <th>1.1</th>\n      <th>1.2</th>\n      <th>1.3</th>\n      <th>1.4</th>\n      <th>1.5</th>\n      <th>1.6</th>\n      <th>1.7</th>\n      <th>1.8</th>\n    </tr>\n    <tr>\n      <th colspan=2><code>npm</code></th>\n      <th>9.5.0</th>\n      <th>9.6.2</th>\n      <th>9.6.3</th>\n      <th>9.6.5</th>\n      <th>9.6.6</th>\n      <th>9.6.7</th>\n      <th>9.7.2</th>\n      <th>9.8.0</th>\n      <th></th>\n    </tr>\n    <tr>\n      <th>Bundle Version</th>\n      <th>Rekor Type</th>\n      <th colspan=9></th>\n    </tr>\n  </thead>\n  <tbody>\n    <tr>\n      <td rowspan=3>0.1</td>\n      <td>hashedrekord</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n    </tr>\n    <tr>\n      <td>intoto</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n    </tr>\n    <tr>\n      <td>dsse</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n    </tr>\n    <tr>\n      <td rowspan=3>0.2</td>\n      <td>hashedrekord</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n    </tr>\n    <tr>\n      <td>intoto</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n    </tr>\n    <tr>\n      <td>dsse</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:x:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n      <td>:white_check_mark:</td>\n    </tr>\n  </tbody>\n</table>\n\n## Usage\n\n```javascript\nconst { attest, verify } = require('sigstore');\n```\n\n```javascript\nimport { attest, verify } from 'sigstore';\n```\n\n### sign(payload[, options])\n\nGenerates a Sigstore signature for the supplied payload. Returns a\n[Sigstore bundle][2] containing the signature and the verification material\nnecessary to verify the signature.\n\n- `payload` `<Buffer>`: The bytes of the artifact to be signed.\n- `options` `<Object>`\n  - `fulcioURL` `<string>`: The base URL of the Fulcio instance to use for retrieving the signing certificate. Defaults to `'https://fulcio.sigstore.dev'`.\n  - `rekorURL` `<string>`: The base URL of the Rekor instance to use when adding the signature to the transparency log. Defaults to `'https://rekor.sigstore.dev'`.\n  - `tsaServerURL` `<string>`: The base URL of the Timestamp Authority instance to use when requesting a signed timestamp. If omitted, no timestamp will be requested.\n  - `tlogUpload` `<boolean>`: Flag indicating whether or not the signature should be recorded on the Rekor transparency log. Defaults to `true`.\n  - `identityToken` `<string>`: The OIDC token identifying the signer. If no explicit token is supplied, an attempt will be made to retrieve one from the environment. This config cannot be used with `identityProvider`.\n  - `identityProvider` `<IdentityProvider>`: Object which implements `getToken: () => Promise<string>`. The supplied provider will be used to retrieve an OIDC token. If no provider is supplied, an attempt will be made to retrieve an OIDC token from the environment. This config cannot be used with `identityToken`.\n  - `legacyCompatibility` `<boolean>`: Flag indicating whether to enable legacy compatibility mode. When set to `true`, the returned bundle will use the Sigstore v0.2 bundle format. When unset or `false`, the returned bundle will be v0.3 or greater.\n\n### attest(payload, payloadType[, options])\n\nGenerates a Sigstore signature for the supplied in-toto statement. Returns a\n[Sigstore bundle][2] containing the [DSSE][3]-wrapped statement and signature\nas well as the verification material necessary to verify the signature.\n\n- `payload` `<Buffer>`: The bytes of the statement to be signed.\n- `payloadType` `<string>`: MIME or content type describing the statement to be signed.\n- `options` `<Object>`\n  - `fulcioURL` `<string>`: The base URL of the Fulcio instance to use for retrieving the signing certificate. Defaults to `'https://fulcio.sigstore.dev'`.\n  - `rekorURL` `<string>`: The base URL of the Rekor instance to use when adding the signature to the transparency log. Defaults to `'https://rekor.sigstore.dev'`.\n  - `tsaServerURL` `<string>`: The base URL of the Timestamp Authority instance to use when requesting a signed timestamp. If omitted, no timestamp will be requested.\n  - `tlogUpload` `<boolean>`: Flag indicating whether or not the signed statement should be recorded on the Rekor transparency log. Defaults to `true`.\n  - `identityToken` `<string>`: The OIDC token identifying the signer. If no explicit token is supplied, an attempt will be made to retrieve one from the environment. This config cannot be used with `identityProvider`.\n  - `identityProvider` `<IdentityProvider>`: Object which implements `getToken: () => Promise<string>`. The supplied provider will be used to retrieve an OIDC token. If no provider is supplied, an attempt will be made to retrieve an OIDC token from the environment. This config cannot be used with `identityToken`.\n  - `legacyCompatibility` `<boolean>`: Flag indicating whether to enable legacy compatibility mode. When set to `true`, any record written to the Rekor transparency log will use the \"intoto\" record type and the returned bundle will use the Sigstore v0.2 bundle format. When unset or `false`, the \"dsse\" Rekor type will be used and the returned bundle will be v0.3 or greater.\n\n### verify(bundle[, payload][, options])\n\nVerifies the signature in the supplied bundle. Returns a `Signer` object containing the public key and identity information from the verification.\n\n- `bundle` `<Bundle>`: The Sigstore bundle containing the signature to be verified and the verification material necessary to verify the signature.\n- `payload` `<Buffer>`: The bytes of the artifact over which the signature was created. Only necessary when the `sign` function was used to generate the signature since the Bundle does not contain any information about the artifact which was signed. Not required when the `attest` function was used to generate the Bundle.\n- `options` `<Object>`\n  - `ctLogThreshold` `<number>`: The number of certificate transparency logs on which the signing certificate must appear. Defaults to `1`.\n  - `tlogThreshold` `<number>`: The number of transparency logs on which the signature must appear. Defaults to `1`.\n  - `certificateIssuer` `<string>`: Value that must appear in the signing certificate's issuer extension (OID 1.3.6.1.4.1.57264.1.1). Not verified if no value is supplied.\n  - `certificateIdentityEmail` `<string>`: Email address which must appear in the signing certificate's Subject Alternative Name (SAN) extension. Must be specified in conjunction with the `certificateIssuer` option. Takes precedence over the `certificateIdentityURI` option. Not verified if no value is supplied.\n  - `certificateIdentityURI` `<string>`: URI which must appear in the signing certificate's Subject Alternative Name (SAN) extension. Must be specified in conjunction with the `certificateIssuer` option. Ignored if the `certificateIdentityEmail` option is set. Not verified if no value is supplied.\n  - `certificateOIDs` `<Object>`: A collection of OID/value pairs which must be present in the certificate's extension list. Not verified if no value is supplied.\n  - `keySelector` `<Function>`: Callback invoked to retrieve the public key (as either `string` or `Buffer`) necessary to verify the bundle signature. Not used when the signature was generated from a Fulcio-issued signing certificate.\n    - `hint` `<String>`: The hint from the bundle used to identify the the signing key.\n\n## Credential Sources\n\n### GitHub Actions\n\nIf sigstore-js detects that it is being executed on GitHub Actions, it will use `ACTIONS_ID_TOKEN_REQUEST_URL`\nand `ACTIONS_ID_TOKEN_REQUEST_TOKEN` environment variables to request an OIDC token with the correct scope.\n\nNote: the `id_token: write` permission must be granted to the GitHub Action Job.\n\nSee https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect\nfor more details.\n\n### Environment Variables\n\nIf the `SIGSTORE_ID_TOKEN` environment variable is set, it will use this to authenticate to Fulcio.\nIt is the callers responsibility to make sure that this token has the correct scopes.\n\n[1]: https://github.com/sigstore/rekor\n[2]: https://github.com/sigstore/protobuf-specs/blob/9b722b68a717778ba4f11543afa4ef93205ab502/protos/sigstore_bundle.proto#L63-L84\n[3]: https://github.com/secure-systems-lab/dsse\n[4]: https://github.com/sigstore/cosign\n","_attachments":{},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"license":"Apache-2.0"}