@sigstore/tuf

v5.0.0npm· JavaScript

Client for the Sigstore TUF repository

The verdict

Solid choice. Well-adopted and active, actively maintained.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceHealthy

PopularityWidely used

SecurityClean

LicensePermissive

DepsLean

Maintenance

Last published this month.

Popularity

8.6M downloads / week

Security

No known advisories for this version (OSV).

License

Apache-2.0

Dependencies

2 direct dependencies

Recent releases