{"_id":"@sigstore/tuf","_rev":"20-6c32aaa70bd41dd5809a24536a705698","name":"@sigstore/tuf","dist-tags":{"latest":"5.0.0"},"versions":{"1.0.0":{"name":"@sigstore/tuf","version":"1.0.0","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@1.0.0","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"13b69323e7bf8de458cd6c952c57acd1169772a5","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-1.0.0.tgz","fileCount":14,"integrity":"sha512-bLzi9GeZgMCvjJeLUIfs8LJYCxrPRA8IXQkzUtaFKKVPTz0mucRyqFcV2U20yg9K+kYAD0YSitzGfRZCFLjdHQ==","signatures":[{"sig":"MEUCIAWwkfblAHueAUm2GFLhUuNMRu1qTptsjDugpPtrPmxsAiEAqsvtkZtngdwFPY8FxmHf41cAdptvZK51rg1/XzLkhgg=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@1.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"unpackedSize":32688},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"c78bc0f6d2e257e0e6c603ebb6fa67ff1d52a53b","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"9.6.7","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"16.20.0","dependencies":{"tuf-js":"^1.1.3","make-fetch-happen":"^11.0.1","@sigstore/protobuf-specs":"^0.1.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"shx":"^0.3.3","nock":"^13.2.4","typescript":"^5.1.3","@types/node":"^20.2.5","@tufjs/repo-mock":"^1.1.0","@total-typescript/shoehorn":"^0.1.0"},"_npmOperationalInternal":{"tmp":"tmp/tuf_1.0.0_1686064503179_0.5176801593888163","host":"s3://npm-registry-packages"}},"1.0.1":{"name":"@sigstore/tuf","version":"1.0.1","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@1.0.1","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"45a6d14713d98013d970394791a9999e7dc9edeb","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-1.0.1.tgz","fileCount":14,"integrity":"sha512-uMkpaZWAZbvzIHWEUPZv23B95Hm53X/ZxWhUrPo8y5oxcsa/DQe+gRGSkmLQY+0x7SxGhN6Ey0GjTW33LttT9g==","signatures":[{"sig":"MEYCIQCDA89clZqHPG60Xz6cHYYjDji6LtuUR8mj21CIENwNSAIhAMdocu4s6AUTjfv+/WHSB0h6zMY4HZSVNy0nDbuYhdNd","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@1.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"unpackedSize":32586},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"ebdcfdfbdfeb9c9aeee6df53674ef230613629f5","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"9.7.2","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"16.20.1","dependencies":{"tuf-js":"^1.1.7","@sigstore/protobuf-specs":"^0.1.0","@types/make-fetch-happen":"^10.0.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^1.1.0"},"_npmOperationalInternal":{"tmp":"tmp/tuf_1.0.1_1688142989714_0.4801663628811663","host":"s3://npm-registry-packages"}},"1.0.2":{"name":"@sigstore/tuf","version":"1.0.2","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@1.0.2","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"acbb2c8399fb03aca0c90fa1dc1934bda4160623","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-1.0.2.tgz","fileCount":14,"integrity":"sha512-vjwcYePJzM01Ha6oWWZ9gNcdIgnzyFxfqfWzph483DPJTH8Tb7f7bQRRll3CYVkyH56j0AgcPAcl6Vg95DPF+Q==","signatures":[{"sig":"MEQCIBkZD3enxdxN0mKB4NgcvjqiDWgTXNlU3pbSuP/Ueg8yAiB9agTuPv8EgcmwU5X/EBVxMELHtL7D9oCpaagUJpo+5A==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@1.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"unpackedSize":32586},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"6bdd44094f1ac4697d01d70861cd1fb672985fec","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"9.7.2","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"16.20.1","dependencies":{"tuf-js":"^1.1.7","@sigstore/protobuf-specs":"^0.1.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0"},"_npmOperationalInternal":{"tmp":"tmp/tuf_1.0.2_1688145297524_0.0821325858261086","host":"s3://npm-registry-packages"}},"1.0.3":{"name":"@sigstore/tuf","version":"1.0.3","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@1.0.3","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"2a65986772ede996485728f027b0514c0b70b160","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-1.0.3.tgz","fileCount":14,"integrity":"sha512-2bRovzs0nJZFlCN3rXirE4gwxCn97JNjMmwpecqlbgV9WcxX7WRuIrgzx/X7Ib7MYRbyUTpBYE0s2x6AmZXnlg==","signatures":[{"sig":"MEUCIQDNhrV0FqUImFTf02NLKYnpTE9SUtHuXPvZWoUuypLpvgIgQfjIDuMKMwfVt6uvdIex6zEaajdgdH9ZwLuF0GvCXd0=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@1.0.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":32586},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"8d69554570934c3f82fad8eda929ec36f5d12262","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"9.8.0","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"16.20.1","dependencies":{"tuf-js":"^1.1.7","@sigstore/protobuf-specs":"^0.2.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0"},"_npmOperationalInternal":{"tmp":"tmp/tuf_1.0.3_1689783034656_0.19310064849884645","host":"s3://npm-registry-packages"}},"2.0.0":{"name":"@sigstore/tuf","version":"2.0.0","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@2.0.0","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"e459ec51bd5c01319b7e2f66ddfe446d42964a56","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.0.0.tgz","fileCount":14,"integrity":"sha512-Ow/ZMFH9kdHbMNOH//rDuINblqufpqD+e3xS9JY5RRce+euh9eUsjSc6jodioMMi2roN9rSAk8LCuyW2hngAKw==","signatures":[{"sig":"MEQCIH2tH7py3ffYe5TI+fHPdFZ6MG4WUfigh9Z0BDDoYZ1HAiAnO0p+k/5fWeJJMQT6nxkEJ5wwBvS9rpiYuPSSmF6XHA==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":32080},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^16.14.0 || >=18.0.0"},"gitHead":"f0b49a04e5a62250e0f60fb128004a73110fe311","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"9.8.1","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"16.20.2","dependencies":{"tuf-js":"^2.0.0","@sigstore/protobuf-specs":"^0.2.1"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.0"},"_npmOperationalInternal":{"tmp":"tmp/tuf_2.0.0_1692374736026_0.26284016174182856","host":"s3://npm-registry-packages"}},"2.1.0":{"name":"@sigstore/tuf","version":"2.1.0","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@2.1.0","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"8bf99444e431ba36198d8f742296b48170dcb486","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.1.0.tgz","fileCount":14,"integrity":"sha512-BUoVCx+7Wj+8moEGvUU2MyBI+f93lmg1CLmoG6KrhQMeDyAG8HAZNk+YRCNuvwvSDCfPhwsj37Bg63/Q+bnGsw==","signatures":[{"sig":"MEYCIQDFYltCKWQSOGWPSOoVChaSIpH8FFTEJvjFoP2C+8wE9AIhAPTbUjLXjo0F5ZfVnNZCZA4Sk5uAw2XSVSj2yIj6VPPT","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":32080},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^16.14.0 || >=18.0.0"},"gitHead":"26d16513386ffaa790b1c32f927544f1322e4194","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"9.8.1","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"16.20.2","dependencies":{"tuf-js":"^2.1.0","@sigstore/protobuf-specs":"^0.2.1"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.0"},"_npmOperationalInternal":{"tmp":"tmp/tuf_2.1.0_1693323623737_0.24378298856085845","host":"s3://npm-registry-packages"}},"2.2.0":{"name":"@sigstore/tuf","version":"2.2.0","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@2.2.0","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"ef636239687e41af3f2ce10667ab88f5ca6165b3","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.2.0.tgz","fileCount":14,"integrity":"sha512-KKATZ5orWfqd9ZG6MN8PtCIx4eevWSuGRKQvofnWXRpyMyUEpmrzg5M5BrCpjM+NfZ0RbNGOh5tCz/P2uoRqOA==","signatures":[{"sig":"MEYCIQDb4cdQUsVs3Fs3GySNR/ZHAQKLoSJ1LjxiTMwBLU6Q8gIhAPmw1TZq/tTfCdnQZDVKUunvsusDWwCpdsWZQT+23yQm","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":32811},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^16.14.0 || >=18.0.0"},"gitHead":"acdffd6e4acd448ea9a8a96dddfd2a3c31060691","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"10.0.0","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"18.17.0","dependencies":{"tuf-js":"^2.1.0","@sigstore/protobuf-specs":"^0.2.1"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.0"},"_npmOperationalInternal":{"tmp":"tmp/tuf_2.2.0_1694193634496_0.5828924383306959","host":"s3://npm-registry-packages"}},"2.3.0":{"name":"@sigstore/tuf","version":"2.3.0","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@2.3.0","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"de64925ea10b16f3a7e77535d91eaf22be4dd904","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.3.0.tgz","fileCount":14,"integrity":"sha512-S98jo9cpJwO1mtQ+2zY7bOdcYyfVYCUaofCG6wWRzk3pxKHVAkSfshkfecto2+LKsx7Ovtqbgb2LS8zTRhxJ9Q==","signatures":[{"sig":"MEUCIQCru6fQPz1ggNilhUBx0V0nQ0ejbQW8H2D9ysWZGxHIRAIgWgz3+/ox8sS+dKeDcZ1Oajr2MOFCt68Fi12ma2BjJoI=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":47532},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^16.14.0 || >=18.0.0"},"gitHead":"d9093d4b3b99d9ee446633ac7074e43cea78c727","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"10.3.0","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"18.17.0","dependencies":{"tuf-js":"^2.2.0","@sigstore/protobuf-specs":"^0.2.1"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_2.3.0_1705092995231_0.9278518968307929","host":"s3://npm-registry-packages"}},"2.3.1":{"name":"@sigstore/tuf","version":"2.3.1","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@2.3.1","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"86ff3c3c907e271696c88de0108d9063a8cbcc45","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.3.1.tgz","fileCount":14,"integrity":"sha512-9Iv40z652td/QbV0o5n/x25H9w6IYRt2pIGbTX55yFDYlApDQn/6YZomjz6+KBx69rXHLzHcbtTS586mDdFD+Q==","signatures":[{"sig":"MEUCIQCWXDI8H7GuslOoNznRJ7MjfLSv/mp8Gtt3HrJzaTrVtQIgW96osC8OEsLJ18p9f+deslOHtByF1+5Qz2Pz2Vqlsqk=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":47452},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^16.14.0 || >=18.0.0"},"gitHead":"700c78d4e5879c2f4764cc45a89f477106db5ef6","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"10.4.0","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"18.17.0","dependencies":{"tuf-js":"^2.2.0","@sigstore/protobuf-specs":"^0.3.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_2.3.1_1708020210991_0.782613056694601","host":"s3://npm-registry-packages"}},"2.3.2":{"name":"@sigstore/tuf","version":"2.3.2","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@2.3.2","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"e9c5bffc2a5f3434f87195902d7f9cd7f48c70fa","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.3.2.tgz","fileCount":14,"integrity":"sha512-mwbY1VrEGU4CO55t+Kl6I7WZzIl+ysSzEYdA1Nv/FTrl2bkeaPXo5PnWZAVfcY2zSdhOpsUTJW67/M2zHXGn5w==","signatures":[{"sig":"MEUCIQD79Hp/o00TsvJtwMZpUNOjBAJ8YOOTnzrKxMvQCLlLGAIgOcBjLIMZ+pZ+4bpY+WvveFYEDVGdoOOJd3F8jvMTVC8=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":49268},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^16.14.0 || >=18.0.0"},"gitHead":"3934cd61ca52f8dd1134bb2fcb22f3253556fb6e","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"10.5.0","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"18.17.0","dependencies":{"tuf-js":"^2.2.0","@sigstore/protobuf-specs":"^0.3.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_2.3.2_1711382500870_0.11653990002431325","host":"s3://npm-registry-packages"}},"2.3.3":{"name":"@sigstore/tuf","version":"2.3.3","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@2.3.3","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"be416424d5133b61f1adcc75df72136bf1dfe1ff","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.3.3.tgz","fileCount":14,"integrity":"sha512-agQhHNkIddXFslkudjV88vTXiAMEyUtso3at6ZHUNJ1agZb7Ze6VW/PddHipdWBu1t+8OWLW5X5yZOPiOnaWJQ==","signatures":[{"sig":"MEUCIQCT+b2VROS3mjEaqJG+ZbaySNtUsWOuaYQpP8Vi72YSWAIgJQcRHH+7j7SyJjlc4SNlrxDkakUY87TdyejbjaVfs/A=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":49268},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^16.14.0 || >=18.0.0"},"gitHead":"08ac1f1dc9e0352a3551b612d337b82108d9496e","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"10.7.0","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"18.17.0","dependencies":{"tuf-js":"^2.2.1","@sigstore/protobuf-specs":"^0.3.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.1","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_2.3.3_1715210598157_0.05406991772039316","host":"s3://npm-registry-packages"}},"2.3.4":{"name":"@sigstore/tuf","version":"2.3.4","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@2.3.4","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"da1d2a20144f3b87c0172920cbc8dcc7851ca27c","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-2.3.4.tgz","fileCount":14,"integrity":"sha512-44vtsveTPUpqhm9NCrbU8CWLe3Vck2HO1PNLw7RIajbB7xhtn5RBPm1VNSCMwqGYHhDsBJG8gDF0q4lgydsJvw==","signatures":[{"sig":"MEYCIQCeHtOX8YFo1HfENauSQ5drNzaqzuDmzQZrjA6hUfIpYAIhAMef4Dh+e041yGz0frfkG3MGIhIZOl99y/4/bh9Ef9qA","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":49268},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^16.14.0 || >=18.0.0"},"gitHead":"46e7056ff9912ebfee5298d94024895a9fea76c0","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"10.8.0","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"18.17.0","dependencies":{"tuf-js":"^2.2.1","@sigstore/protobuf-specs":"^0.3.2"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.1","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_2.3.4_1715879523811_0.13338417412990378","host":"s3://npm-registry-packages"}},"3.0.0":{"name":"@sigstore/tuf","version":"3.0.0","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@3.0.0","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"},{"name":"mylesborins","email":"myles.borins@gmail.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"5f657e3052e93cb09e1735ee7f52b7938351278d","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-3.0.0.tgz","fileCount":14,"integrity":"sha512-9Xxy/8U5OFJu7s+OsHzI96IX/OzjF/zj0BSSaWhgJgTqtlBhQIV2xdrQI5qxLD7+CWWDepadnXAxzaZ3u9cvRw==","signatures":[{"sig":"MEQCIDVEqBMjRAcf8dtQvFUFieh5FlRZeqIzuXtG7E3mG8zZAiADhu+PJbo80qWIDJI9Y0DZ4N7th6tmNTF3bt85Y0sk6Q==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@3.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":49290},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^18.17.0 || >=20.5.0"},"gitHead":"3a57a741bfb9f7c3bca69b63e170fc28e9432e69","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"10.9.0","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"18.17.0","dependencies":{"tuf-js":"^3.0.1","@sigstore/protobuf-specs":"^0.3.2"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_3.0.0_1728922426971_0.10072136283756317","host":"s3://npm-registry-packages"}},"3.1.0":{"name":"@sigstore/tuf","version":"3.1.0","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@3.1.0","maintainers":[{"name":"mylesborins","email":"myles.borins@gmail.com"},{"name":"bdehamer","email":"brian@dehamer.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"f533ac8ac572c9f7e36f5e08f1effa6b2244f55a","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-3.1.0.tgz","fileCount":14,"integrity":"sha512-suVMQEA+sKdOz5hwP9qNcEjX6B45R+hFFr4LAWzbRc5O+U2IInwvay/bpG5a4s+qR35P/JK/PiKiRGjfuLy1IA==","signatures":[{"sig":"MEUCICH6davBTlwtMKIeC0E0tR47UXe9m3CnDu7wC66VODaRAiEA307bc1+6Wc+YDdP39AppZZGapcHbbUKMnjmBFLrDWPQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@3.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":50762},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^18.17.0 || >=20.5.0"},"gitHead":"06cd267cbdc2eeaa04294995622db9f6ad2fa7cf","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"10.9.2","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"18.17.0","dependencies":{"tuf-js":"^3.0.1","@sigstore/protobuf-specs":"^0.4.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_3.1.0_1738701348289_0.6503397365210546","host":"s3://npm-registry-packages-npm-production"}},"3.1.1":{"name":"@sigstore/tuf","version":"3.1.1","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@3.1.1","maintainers":[{"name":"mylesborins","email":"myles.borins@gmail.com"},{"name":"bdehamer","email":"brian@dehamer.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"b01b261288f646e0da57737782893e7d2695c52e","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-3.1.1.tgz","fileCount":14,"integrity":"sha512-eFFvlcBIoGwVkkwmTi/vEQFSva3xs5Ot3WmBcjgjVdiaoelBLQaQ/ZBfhlG0MnG0cmTYScPpk7eDdGDWUcFUmg==","signatures":[{"sig":"MEUCIDBOm6pnS6j06ZvQhk1bKehYMxA4cdEspjg48WcPS5goAiEA/bBevPyeiDiFORBUmfXKoBA1h7KqT4fH6Z4XDKgMAIM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@3.1.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":45466},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^18.17.0 || >=20.5.0"},"gitHead":"b5af5ac566fd569b3585fd5133acee2eb2083dba","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"bdehamer","email":"brian@dehamer.com"},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"10.9.2","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"18.17.0","dependencies":{"tuf-js":"^3.0.1","@sigstore/protobuf-specs":"^0.4.1"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_3.1.1_1745614548251_0.4716412224113853","host":"s3://npm-registry-packages-npm-production"}},"4.0.0":{"name":"@sigstore/tuf","version":"4.0.0","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@4.0.0","maintainers":[{"name":"mylesborins","email":"myles.borins@gmail.com"},{"name":"bdehamer","email":"brian@dehamer.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"8b3ae2bd09e401386d5b6842a46839e8ff484e6c","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-4.0.0.tgz","fileCount":14,"integrity":"sha512-0QFuWDHOQmz7t66gfpfNO6aEjoFrdhkJaej/AOqb4kqWZVbPWFZifXZzkxyQBB1OwTbkhdT3LNpMFxwkTvf+2w==","signatures":[{"sig":"MEUCIQDy3uEG2w60zdKaVpRwdiyBg7pKniNC6IFBx6Lmh6WMQAIgZtu+IX7Ek9wJ88iaFYz1jucb4KJZnHqYo/kcbvaYzZo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@4.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":48398},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^20.17.0 || >=22.9.0"},"gitHead":"21dd66d041593ad5d9fc2fe461131d8db868ad6f","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:e25c47bb-9288-408b-af93-254e27a1cbc8"}},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"11.5.1","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"20.19.4","dependencies":{"tuf-js":"^4.0.0","@sigstore/protobuf-specs":"^0.5.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_4.0.0_1753831007650_0.8550962503027175","host":"s3://npm-registry-packages-npm-production"}},"4.0.1":{"name":"@sigstore/tuf","version":"4.0.1","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@4.0.1","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"9b080390936d79ea3b6a893b64baf3123e92d6d3","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-4.0.1.tgz","fileCount":14,"integrity":"sha512-OPZBg8y5Vc9yZjmWCHrlWPMBqW5yd8+wFNl+thMdtcWz3vjVSoJQutF8YkrzI0SLGnkuFof4HSsWUhXrf219Lw==","signatures":[{"sig":"MEQCIDVP2JfGDnfEqSilJLx7AC6yN1jth6e81Gp4Bsl4LNleAiBVrE6ak9bWxqJr/DsMMyQ5r+3PXFdreh3ZzFPqt8ivOQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@4.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":49134},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^20.17.0 || >=22.9.0"},"gitHead":"c4ad6141eb947a20690837888e5d90d9a30b5af3","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:e25c47bb-9288-408b-af93-254e27a1cbc8"}},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"11.6.2","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"24.12.0","dependencies":{"tuf-js":"^4.1.0","@sigstore/protobuf-specs":"^0.5.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^4.0.0","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_4.0.1_1766162940253_0.35736213617443213","host":"s3://npm-registry-packages-npm-production"}},"4.0.2":{"name":"@sigstore/tuf","version":"4.0.2","author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","_id":"@sigstore/tuf@4.0.2","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"}],"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"dist":{"shasum":"7d2fa2abcd5afa5baf752671d14a1c6ed0ed3196","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-4.0.2.tgz","fileCount":14,"integrity":"sha512-TCAzTy0xzdP79EnxSjq9KQ3eaR7+FmudLC6eRKknVKZbV7ZNlGLClAAQb/HMNJ5n2OBNk2GT1tEmU0xuPr+SLQ==","signatures":[{"sig":"MEQCICrd7dblc10dk31RtZ1pQ6xEiqbb/dSO+kWKI6LAsgcgAiBKPWfzF6qjZtlFeAvUwRdZWxY2163+FON8fnhoWN8Xwg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@4.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":48814},"main":"dist/index.js","types":"dist/index.d.ts","engines":{"node":"^20.17.0 || >=22.9.0"},"gitHead":"f5e74a230bce732b021bf99e4ca56cbdadfc0eda","scripts":{"test":"jest","build":"tsc --build","clean":"shx rm -rf dist *.tsbuildinfo"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:e25c47bb-9288-408b-af93-254e27a1cbc8"}},"repository":{"url":"git+https://github.com/sigstore/sigstore-js.git","type":"git"},"_npmVersion":"11.9.0","description":"Client for the Sigstore TUF repository","directories":{},"_nodeVersion":"24.14.0","dependencies":{"tuf-js":"^4.1.0","@sigstore/protobuf-specs":"^0.5.0"},"publishConfig":{"provenance":true},"_hasShrinkwrap":false,"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^4.0.1","@types/make-fetch-happen":"^10.0.4"},"_npmOperationalInternal":{"tmp":"tmp/tuf_4.0.2_1773863528933_0.3010204124147138","host":"s3://npm-registry-packages-npm-production"}},"5.0.0":{"name":"@sigstore/tuf","version":"5.0.0","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^5.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.5.0","tuf-js":"^6.0.0"},"engines":{"node":"^22.22.2 || ^24.15.0 || >=26.0.0"},"gitHead":"7d2900eca1c22b3f87c13987c8d4b7c9a29b733a","_id":"@sigstore/tuf@5.0.0","_nodeVersion":"24.16.0","_npmVersion":"11.13.0","dist":{"integrity":"sha512-Zyqg9tcHps3uRAlKHLNmsW4ohsUZAjb9G+31r7lg0ICh/JOcadzmJsIRdjKljlRHpaR0K4aJ2kXXIdywdcdMlA==","shasum":"d873c182dc2bccd7276ee8bc841726baeeaed495","tarball":"https://registry.npmjs.org/@sigstore/tuf/-/tuf-5.0.0.tgz","fileCount":14,"unpackedSize":49026,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@5.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQCAwva5KqkdKxWX/cOZ5Gkp3i9tDzPDM7sm9rtmKHr8GQIgBSNc/YRazIS2VZD/oxH13KvsCQz2RpPTV8l951dvnJE="}]},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:e25c47bb-9288-408b-af93-254e27a1cbc8"}},"directories":{},"maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/tuf_5.0.0_1780347772156_0.7543211094016262"},"_hasShrinkwrap":false}},"time":{"created":"2023-06-06T15:15:03.118Z","modified":"2026-06-01T21:02:52.622Z","1.0.0":"2023-06-06T15:15:03.416Z","1.0.1":"2023-06-30T16:36:29.939Z","1.0.2":"2023-06-30T17:14:57.848Z","1.0.3":"2023-07-19T16:10:34.914Z","2.0.0":"2023-08-18T16:05:36.195Z","2.1.0":"2023-08-29T15:40:24.007Z","2.2.0":"2023-09-08T17:20:34.664Z","2.3.0":"2024-01-12T20:56:35.390Z","2.3.1":"2024-02-15T18:03:31.161Z","2.3.2":"2024-03-25T16:01:41.021Z","2.3.3":"2024-05-08T23:23:18.342Z","2.3.4":"2024-05-16T17:12:04.001Z","3.0.0":"2024-10-14T16:13:47.166Z","3.1.0":"2025-02-04T20:35:48.506Z","3.1.1":"2025-04-25T20:55:48.418Z","4.0.0":"2025-07-29T23:16:47.816Z","4.0.1":"2025-12-19T16:49:00.396Z","4.0.2":"2026-03-18T19:52:09.099Z","5.0.0":"2026-06-01T21:02:52.315Z"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"description":"Client for the Sigstore TUF repository","maintainers":[{"name":"bdehamer","email":"brian@dehamer.com"}],"readme":"# @sigstore/tuf &middot; [![npm version](https://img.shields.io/npm/v/@sigstore/tuf.svg?style=flat)](https://www.npmjs.com/package/@sigstore/tuf) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke Test Status](https://github.com/sigstore/sigstore-js/workflows/smoke-test/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)\n\nA JavaScript library for securely retrieving targets from the Sigstore [TUF][1]\nrepository.\n\n## Features\n\n- Embeds the trutsted root metadata file necessary to bootstrap interaction\n  with the Sigstore TUF repository.\n- Automatically initializes the local TUF cache for storing metadata and\n  target files.\n\n## Prerequisites\n\n- Node.js version ^22.22.2 || ^24.15.0 || >=26.0.0\n\n## Installation\n\n```\nnpm install @sigstore/tuf\n```\n\n## Usage\n\n```javascript\nconst { initTUF } = require('@sigstore/tuf');\n```\n\n```javascript\nimport { initTUF } from '@sigstore/tuf';\n```\n\n### initTUF([options])\n\nReturns a TUF client which can be used to retrieve any target from the Sigstore\nTUF repository. The local TUF cache will be initialized and the TUF metadata\nfiles downloaded from the [remote repository][2] as part of the initialization\nprocess.\n\n- `options` `<Object>`\n  - `mirrorURL` `<string>`: Base URL for the Sigstore TUF repository. Defaults to `'https://tuf-repo-cdn.sigstore.dev'`\n  - `cachePath` `<string>`: Absolute path to the directory to be used for caching downloaded TUF metadata and targets. Defaults to a directory named \"sigstore-js\" within the platform-specific application data directory.\n  - `rootPath` `<string>`: Path to the initial trust root for the TUF repository. Defaults to the [embedded root](./store/public-good-instance-root.json).\n  - `forceInit` `boolean`: Force re-initialization of the TUF cache even if it already exists. Defaults to `false`.\n  - `forceCache` `boolean`: Prevents any downloads from the remote TUF repository as long as all cached metadata files are un-expired. Defaults to `false`.\n  - `force` `boolean`: Same as `forceInit` (deprecated).\n\nThe `TUF` client object returned from `initTUF` has a single `getTarget`\nfunction which takes the name of a target in the Sigstore TUF repository\nand returns the content of that target.\n\n### getTrustedRoot([options])\n\nRetrieves the most recent version of the \"trusted_root.json\" target from the\nSigstore TUF repository. The format of \"trusted_root.json\" file is described\nby the [TrustedRoot][3] protobuf and contains the complete set of trusted\nverification materials for the Sigstore public-good instance.\n\n- `options` `<Object>`\n  - `mirrorURL` `<string>`: Base URL for the Sigstore TUF repository. Defaults to `'https://tuf-repo-cdn.sigstore.dev'`\n  - `cachePath` `<string>`: Absolute path to the directory to be used for caching downloaded TUF metadata and targets. Defaults to a directory named \"sigstore-js\" within the platform-specific application data directory.\n  - `rootPath` `<string>`: Path to the initial trust root for the TUF repository. Defaults to the [embedded root](./store/public-good-instance-root.json).\n  - `forceInit` `boolean`: Force re-initialization of the TUF cache even if it already exists. Defaults to `false`.\n  - `forceCache` `boolean`: Prevents any downloads from the remote TUF repository as long as all cached metadata files are un-expired. Defaults to `false`.\n  - `force` `boolean`: Same as `forceInit` (deprecated).\n\n[1]: https://theupdateframework.io/\n[2]: https://sigstore-tuf-root.storage.googleapis.com/\n[3]: https://github.com/sigstore/protobuf-specs/blob/main/protos/sigstore_trustroot.proto\n","readmeFilename":"README.md"}