{"versions":{"1.0.0":{"name":"@sigstore/tuf","version":"1.0.0","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@total-typescript/shoehorn":"^0.1.0","@tufjs/repo-mock":"^1.1.0","@types/node":"^20.2.5","nock":"^13.2.4","shx":"^0.3.3","typescript":"^5.1.3"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","tuf-js":"^1.1.3","make-fetch-happen":"^11.0.1"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"c78bc0f6d2e257e0e6c603ebb6fa67ff1d52a53b","_id":"@sigstore/tuf@1.0.0","_nodeVersion":"16.20.0","_npmVersion":"9.6.7","dist":{"integrity":"sha512-bLzi9GeZgMCvjJeLUIfs8LJYCxrPRA8IXQkzUtaFKKVPTz0mucRyqFcV2U20yg9K+kYAD0YSitzGfRZCFLjdHQ==","shasum":"13b69323e7bf8de458cd6c952c57acd1169772a5","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-1.0.0.tgz","fileCount":14,"unpackedSize":32688,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@1.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIAWwkfblAHueAUm2GFLhUuNMRu1qTptsjDugpPtrPmxsAiEAqsvtkZtngdwFPY8FxmHf41cAdptvZK51rg1/XzLkhgg="}],"size":10279},"_npmUser":{"name":"anonymous","email":"myles.borins@gmail.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_1.0.0_1686064503179_0.5176801593888163"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2023-06-06T15:15:03.416Z","publish_time":1686064503416,"_source_registry_name":"default","contributors":[]},"1.0.1":{"name":"@sigstore/tuf","version":"1.0.1","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^1.1.0"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","@types/make-fetch-happen":"^10.0.0","tuf-js":"^1.1.7"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"ebdcfdfbdfeb9c9aeee6df53674ef230613629f5","_id":"@sigstore/tuf@1.0.1","_nodeVersion":"16.20.1","_npmVersion":"9.7.2","dist":{"integrity":"sha512-uMkpaZWAZbvzIHWEUPZv23B95Hm53X/ZxWhUrPo8y5oxcsa/DQe+gRGSkmLQY+0x7SxGhN6Ey0GjTW33LttT9g==","shasum":"45a6d14713d98013d970394791a9999e7dc9edeb","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-1.0.1.tgz","fileCount":14,"unpackedSize":32586,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@1.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQCDA89clZqHPG60Xz6cHYYjDji6LtuUR8mj21CIENwNSAIhAMdocu4s6AUTjfv+/WHSB0h6zMY4HZSVNy0nDbuYhdNd"}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_1.0.1_1688142989714_0.4801663628811663"},"_hasShrinkwrap":false,"contributors":[]},"1.0.2":{"name":"@sigstore/tuf","version":"1.0.2","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/protobuf-specs":"^0.1.0","tuf-js":"^1.1.7"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"gitHead":"6bdd44094f1ac4697d01d70861cd1fb672985fec","_id":"@sigstore/tuf@1.0.2","_nodeVersion":"16.20.1","_npmVersion":"9.7.2","dist":{"integrity":"sha512-vjwcYePJzM01Ha6oWWZ9gNcdIgnzyFxfqfWzph483DPJTH8Tb7f7bQRRll3CYVkyH56j0AgcPAcl6Vg95DPF+Q==","shasum":"acbb2c8399fb03aca0c90fa1dc1934bda4160623","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-1.0.2.tgz","fileCount":14,"unpackedSize":32586,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@1.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIBkZD3enxdxN0mKB4NgcvjqiDWgTXNlU3pbSuP/Ueg8yAiB9agTuPv8EgcmwU5X/EBVxMELHtL7D9oCpaagUJpo+5A=="}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_1.0.2_1688145297524_0.0821325858261086"},"_hasShrinkwrap":false,"contributors":[]},"1.0.3":{"name":"@sigstore/tuf","version":"1.0.3","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^1.1.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/protobuf-specs":"^0.2.0","tuf-js":"^1.1.7"},"engines":{"node":"^14.17.0 || ^16.13.0 || >=18.0.0"},"_id":"@sigstore/tuf@1.0.3","gitHead":"8d69554570934c3f82fad8eda929ec36f5d12262","_nodeVersion":"16.20.1","_npmVersion":"9.8.0","dist":{"integrity":"sha512-2bRovzs0nJZFlCN3rXirE4gwxCn97JNjMmwpecqlbgV9WcxX7WRuIrgzx/X7Ib7MYRbyUTpBYE0s2x6AmZXnlg==","shasum":"2a65986772ede996485728f027b0514c0b70b160","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-1.0.3.tgz","fileCount":14,"unpackedSize":32586,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@1.0.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQDNhrV0FqUImFTf02NLKYnpTE9SUtHuXPvZWoUuypLpvgIgQfjIDuMKMwfVt6uvdIex6zEaajdgdH9ZwLuF0GvCXd0="}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_1.0.3_1689783034656_0.19310064849884645"},"_hasShrinkwrap":false,"contributors":[]},"2.0.0":{"name":"@sigstore/tuf","version":"2.0.0","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/protobuf-specs":"^0.2.1","tuf-js":"^2.0.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"@sigstore/tuf@2.0.0","gitHead":"f0b49a04e5a62250e0f60fb128004a73110fe311","_nodeVersion":"16.20.2","_npmVersion":"9.8.1","dist":{"integrity":"sha512-Ow/ZMFH9kdHbMNOH//rDuINblqufpqD+e3xS9JY5RRce+euh9eUsjSc6jodioMMi2roN9rSAk8LCuyW2hngAKw==","shasum":"e459ec51bd5c01319b7e2f66ddfe446d42964a56","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-2.0.0.tgz","fileCount":14,"unpackedSize":32080,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIH2tH7py3ffYe5TI+fHPdFZ6MG4WUfigh9Z0BDDoYZ1HAiAnO0p+k/5fWeJJMQT6nxkEJ5wwBvS9rpiYuPSSmF6XHA=="}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_2.0.0_1692374736026_0.26284016174182856"},"_hasShrinkwrap":false,"contributors":[]},"2.1.0":{"name":"@sigstore/tuf","version":"2.1.0","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/protobuf-specs":"^0.2.1","tuf-js":"^2.1.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"@sigstore/tuf@2.1.0","gitHead":"26d16513386ffaa790b1c32f927544f1322e4194","_nodeVersion":"16.20.2","_npmVersion":"9.8.1","dist":{"integrity":"sha512-BUoVCx+7Wj+8moEGvUU2MyBI+f93lmg1CLmoG6KrhQMeDyAG8HAZNk+YRCNuvwvSDCfPhwsj37Bg63/Q+bnGsw==","shasum":"8bf99444e431ba36198d8f742296b48170dcb486","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-2.1.0.tgz","fileCount":14,"unpackedSize":32080,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQDFYltCKWQSOGWPSOoVChaSIpH8FFTEJvjFoP2C+8wE9AIhAPTbUjLXjo0F5ZfVnNZCZA4Sk5uAw2XSVSj2yIj6VPPT"}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_2.1.0_1693323623737_0.24378298856085845"},"_hasShrinkwrap":false,"contributors":[]},"2.2.0":{"name":"@sigstore/tuf","version":"2.2.0","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.0"},"dependencies":{"@sigstore/protobuf-specs":"^0.2.1","tuf-js":"^2.1.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"@sigstore/tuf@2.2.0","gitHead":"acdffd6e4acd448ea9a8a96dddfd2a3c31060691","_nodeVersion":"18.17.0","_npmVersion":"10.0.0","dist":{"integrity":"sha512-KKATZ5orWfqd9ZG6MN8PtCIx4eevWSuGRKQvofnWXRpyMyUEpmrzg5M5BrCpjM+NfZ0RbNGOh5tCz/P2uoRqOA==","shasum":"ef636239687e41af3f2ce10667ab88f5ca6165b3","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-2.2.0.tgz","fileCount":14,"unpackedSize":32811,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQDb4cdQUsVs3Fs3GySNR/ZHAQKLoSJ1LjxiTMwBLU6Q8gIhAPmw1TZq/tTfCdnQZDVKUunvsusDWwCpdsWZQT+23yQm"}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_2.2.0_1694193634496_0.5828924383306959"},"_hasShrinkwrap":false,"contributors":[]},"2.3.0":{"name":"@sigstore/tuf","version":"2.3.0","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.2.1","tuf-js":"^2.2.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"@sigstore/tuf@2.3.0","gitHead":"d9093d4b3b99d9ee446633ac7074e43cea78c727","_nodeVersion":"18.17.0","_npmVersion":"10.3.0","dist":{"integrity":"sha512-S98jo9cpJwO1mtQ+2zY7bOdcYyfVYCUaofCG6wWRzk3pxKHVAkSfshkfecto2+LKsx7Ovtqbgb2LS8zTRhxJ9Q==","shasum":"de64925ea10b16f3a7e77535d91eaf22be4dd904","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-2.3.0.tgz","fileCount":14,"unpackedSize":47532,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCru6fQPz1ggNilhUBx0V0nQ0ejbQW8H2D9ysWZGxHIRAIgWgz3+/ox8sS+dKeDcZ1Oajr2MOFCt68Fi12ma2BjJoI="}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_2.3.0_1705092995231_0.9278518968307929"},"_hasShrinkwrap":false,"contributors":[]},"2.3.1":{"name":"@sigstore/tuf","version":"2.3.1","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.3.0","tuf-js":"^2.2.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"@sigstore/tuf@2.3.1","gitHead":"700c78d4e5879c2f4764cc45a89f477106db5ef6","_nodeVersion":"18.17.0","_npmVersion":"10.4.0","dist":{"integrity":"sha512-9Iv40z652td/QbV0o5n/x25H9w6IYRt2pIGbTX55yFDYlApDQn/6YZomjz6+KBx69rXHLzHcbtTS586mDdFD+Q==","shasum":"86ff3c3c907e271696c88de0108d9063a8cbcc45","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-2.3.1.tgz","fileCount":14,"unpackedSize":47452,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCWXDI8H7GuslOoNznRJ7MjfLSv/mp8Gtt3HrJzaTrVtQIgW96osC8OEsLJ18p9f+deslOHtByF1+5Qz2Pz2Vqlsqk="}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_2.3.1_1708020210991_0.782613056694601"},"_hasShrinkwrap":false,"contributors":[]},"2.3.2":{"name":"@sigstore/tuf","version":"2.3.2","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.3.0","tuf-js":"^2.2.0"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"@sigstore/tuf@2.3.2","gitHead":"3934cd61ca52f8dd1134bb2fcb22f3253556fb6e","_nodeVersion":"18.17.0","_npmVersion":"10.5.0","dist":{"integrity":"sha512-mwbY1VrEGU4CO55t+Kl6I7WZzIl+ysSzEYdA1Nv/FTrl2bkeaPXo5PnWZAVfcY2zSdhOpsUTJW67/M2zHXGn5w==","shasum":"e9c5bffc2a5f3434f87195902d7f9cd7f48c70fa","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-2.3.2.tgz","fileCount":14,"unpackedSize":49268,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQD79Hp/o00TsvJtwMZpUNOjBAJ8YOOTnzrKxMvQCLlLGAIgOcBjLIMZ+pZ+4bpY+WvveFYEDVGdoOOJd3F8jvMTVC8="}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_2.3.2_1711382500870_0.11653990002431325"},"_hasShrinkwrap":false,"contributors":[]},"2.3.3":{"name":"@sigstore/tuf","version":"2.3.3","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.3.0","tuf-js":"^2.2.1"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"@sigstore/tuf@2.3.3","gitHead":"08ac1f1dc9e0352a3551b612d337b82108d9496e","_nodeVersion":"18.17.0","_npmVersion":"10.7.0","dist":{"integrity":"sha512-agQhHNkIddXFslkudjV88vTXiAMEyUtso3at6ZHUNJ1agZb7Ze6VW/PddHipdWBu1t+8OWLW5X5yZOPiOnaWJQ==","shasum":"be416424d5133b61f1adcc75df72136bf1dfe1ff","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-2.3.3.tgz","fileCount":14,"unpackedSize":49268,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCT+b2VROS3mjEaqJG+ZbaySNtUsWOuaYQpP8Vi72YSWAIgJQcRHH+7j7SyJjlc4SNlrxDkakUY87TdyejbjaVfs/A="}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_2.3.3_1715210598157_0.05406991772039316"},"_hasShrinkwrap":false,"contributors":[]},"2.3.4":{"name":"@sigstore/tuf","version":"2.3.4","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^2.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.3.2","tuf-js":"^2.2.1"},"engines":{"node":"^16.14.0 || >=18.0.0"},"_id":"@sigstore/tuf@2.3.4","gitHead":"46e7056ff9912ebfee5298d94024895a9fea76c0","_nodeVersion":"18.17.0","_npmVersion":"10.8.0","dist":{"integrity":"sha512-44vtsveTPUpqhm9NCrbU8CWLe3Vck2HO1PNLw7RIajbB7xhtn5RBPm1VNSCMwqGYHhDsBJG8gDF0q4lgydsJvw==","shasum":"da1d2a20144f3b87c0172920cbc8dcc7851ca27c","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-2.3.4.tgz","fileCount":14,"unpackedSize":49268,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@2.3.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQCeHtOX8YFo1HfENauSQ5drNzaqzuDmzQZrjA6hUfIpYAIhAMef4Dh+e041yGz0frfkG3MGIhIZOl99y/4/bh9Ef9qA"}]},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_2.3.4_1715879523811_0.13338417412990378"},"_hasShrinkwrap":false,"contributors":[]},"3.0.0":{"name":"@sigstore/tuf","version":"3.0.0","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.3.2","tuf-js":"^3.0.1"},"engines":{"node":"^18.17.0 || >=20.5.0"},"_id":"@sigstore/tuf@3.0.0","gitHead":"3a57a741bfb9f7c3bca69b63e170fc28e9432e69","_nodeVersion":"18.17.0","_npmVersion":"10.9.0","dist":{"integrity":"sha512-9Xxy/8U5OFJu7s+OsHzI96IX/OzjF/zj0BSSaWhgJgTqtlBhQIV2xdrQI5qxLD7+CWWDepadnXAxzaZ3u9cvRw==","shasum":"5f657e3052e93cb09e1735ee7f52b7938351278d","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-3.0.0.tgz","fileCount":14,"unpackedSize":49290,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@3.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIDVEqBMjRAcf8dtQvFUFieh5FlRZeqIzuXtG7E3mG8zZAiADhu+PJbo80qWIDJI9Y0DZ4N7th6tmNTF3bt85Y0sk6Q=="}],"size":18704},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"},{"name":"anonymous","email":"myles.borins@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/tuf_3.0.0_1728922426971_0.10072136283756317"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2024-10-14T16:13:47.166Z","publish_time":1728922427166,"_source_registry_name":"default","contributors":[]},"3.1.0":{"name":"@sigstore/tuf","version":"3.1.0","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.4.0","tuf-js":"^3.0.1"},"engines":{"node":"^18.17.0 || >=20.5.0"},"_id":"@sigstore/tuf@3.1.0","gitHead":"06cd267cbdc2eeaa04294995622db9f6ad2fa7cf","_nodeVersion":"18.17.0","_npmVersion":"10.9.2","dist":{"integrity":"sha512-suVMQEA+sKdOz5hwP9qNcEjX6B45R+hFFr4LAWzbRc5O+U2IInwvay/bpG5a4s+qR35P/JK/PiKiRGjfuLy1IA==","shasum":"f533ac8ac572c9f7e36f5e08f1effa6b2244f55a","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-3.1.0.tgz","fileCount":14,"unpackedSize":50762,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@3.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCICH6davBTlwtMKIeC0E0tR47UXe9m3CnDu7wC66VODaRAiEA307bc1+6Wc+YDdP39AppZZGapcHbbUKMnjmBFLrDWPQ="}],"size":19182},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"myles.borins@gmail.com"},{"name":"anonymous","email":"brian@dehamer.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/tuf_3.1.0_1738701348289_0.6503397365210546"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2025-02-04T20:35:48.506Z","publish_time":1738701348506,"_source_registry_name":"default","contributors":[]},"3.1.1":{"name":"@sigstore/tuf","version":"3.1.1","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.4.1","tuf-js":"^3.0.1"},"engines":{"node":"^18.17.0 || >=20.5.0"},"_id":"@sigstore/tuf@3.1.1","gitHead":"b5af5ac566fd569b3585fd5133acee2eb2083dba","_nodeVersion":"18.17.0","_npmVersion":"10.9.2","dist":{"integrity":"sha512-eFFvlcBIoGwVkkwmTi/vEQFSva3xs5Ot3WmBcjgjVdiaoelBLQaQ/ZBfhlG0MnG0cmTYScPpk7eDdGDWUcFUmg==","shasum":"b01b261288f646e0da57737782893e7d2695c52e","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-3.1.1.tgz","fileCount":14,"unpackedSize":45466,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@3.1.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIDBOm6pnS6j06ZvQhk1bKehYMxA4cdEspjg48WcPS5goAiEA/bBevPyeiDiFORBUmfXKoBA1h7KqT4fH6Z4XDKgMAIM="}],"size":16389},"_npmUser":{"name":"anonymous","email":"brian@dehamer.com"},"directories":{},"maintainers":[{"name":"anonymous","email":"myles.borins@gmail.com"},{"name":"anonymous","email":"brian@dehamer.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/tuf_3.1.1_1745614548251_0.4716412224113853"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2025-04-25T20:55:48.418Z","publish_time":1745614548418,"_source_registry_name":"default","contributors":[]},"4.0.0":{"name":"@sigstore/tuf","version":"4.0.0","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^3.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.5.0","tuf-js":"^4.0.0"},"engines":{"node":"^20.17.0 || >=22.9.0"},"_id":"@sigstore/tuf@4.0.0","gitHead":"21dd66d041593ad5d9fc2fe461131d8db868ad6f","_nodeVersion":"20.19.4","_npmVersion":"11.5.1","dist":{"integrity":"sha512-0QFuWDHOQmz7t66gfpfNO6aEjoFrdhkJaej/AOqb4kqWZVbPWFZifXZzkxyQBB1OwTbkhdT3LNpMFxwkTvf+2w==","shasum":"8b3ae2bd09e401386d5b6842a46839e8ff484e6c","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-4.0.0.tgz","fileCount":14,"unpackedSize":48398,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@4.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQDy3uEG2w60zdKaVpRwdiyBg7pKniNC6IFBx6Lmh6WMQAIgZtu+IX7Ek9wJ88iaFYz1jucb4KJZnHqYo/kcbvaYzZo="}],"size":18077},"_npmUser":{"name":"anonymous","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:e25c47bb-9288-408b-af93-254e27a1cbc8"}},"directories":{},"maintainers":[{"name":"anonymous","email":"myles.borins@gmail.com"},{"name":"anonymous","email":"brian@dehamer.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/tuf_4.0.0_1753831007650_0.8550962503027175"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2025-07-29T23:16:47.816Z","publish_time":1753831007816,"_source_registry_name":"default","contributors":[]},"4.0.1":{"name":"@sigstore/tuf","version":"4.0.1","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^4.0.0","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.5.0","tuf-js":"^4.1.0"},"engines":{"node":"^20.17.0 || >=22.9.0"},"gitHead":"c4ad6141eb947a20690837888e5d90d9a30b5af3","_id":"@sigstore/tuf@4.0.1","_nodeVersion":"24.12.0","_npmVersion":"11.6.2","dist":{"integrity":"sha512-OPZBg8y5Vc9yZjmWCHrlWPMBqW5yd8+wFNl+thMdtcWz3vjVSoJQutF8YkrzI0SLGnkuFof4HSsWUhXrf219Lw==","shasum":"9b080390936d79ea3b6a893b64baf3123e92d6d3","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-4.0.1.tgz","fileCount":14,"unpackedSize":49134,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@4.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIDVP2JfGDnfEqSilJLx7AC6yN1jth6e81Gp4Bsl4LNleAiBVrE6ak9bWxqJr/DsMMyQ5r+3PXFdreh3ZzFPqt8ivOQ=="}],"size":18292},"_npmUser":{"name":"anonymous","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:e25c47bb-9288-408b-af93-254e27a1cbc8"}},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/tuf_4.0.1_1766162940253_0.35736213617443213"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2025-12-19T16:49:00.396Z","publish_time":1766162940396,"_source_registry_name":"default","contributors":[]},"4.0.2":{"name":"@sigstore/tuf","version":"4.0.2","description":"Client for the Sigstore TUF repository","main":"dist/index.js","types":"dist/index.d.ts","scripts":{"clean":"shx rm -rf dist *.tsbuildinfo","build":"tsc --build","test":"jest"},"author":{"name":"bdehamer@github.com"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/sigstore/sigstore-js.git"},"bugs":{"url":"https://github.com/sigstore/sigstore-js/issues"},"homepage":"https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme","publishConfig":{"provenance":true},"devDependencies":{"@sigstore/jest":"^0.0.0","@tufjs/repo-mock":"^4.0.1","@types/make-fetch-happen":"^10.0.4"},"dependencies":{"@sigstore/protobuf-specs":"^0.5.0","tuf-js":"^4.1.0"},"engines":{"node":"^20.17.0 || >=22.9.0"},"gitHead":"f5e74a230bce732b021bf99e4ca56cbdadfc0eda","_id":"@sigstore/tuf@4.0.2","_nodeVersion":"24.14.0","_npmVersion":"11.9.0","dist":{"integrity":"sha512-TCAzTy0xzdP79EnxSjq9KQ3eaR7+FmudLC6eRKknVKZbV7ZNlGLClAAQb/HMNJ5n2OBNk2GT1tEmU0xuPr+SLQ==","shasum":"7d2fa2abcd5afa5baf752671d14a1c6ed0ed3196","tarball":"http://123.232.10.234:8212/nexus/content/groups/npm-public/@sigstore/tuf/-/tuf-4.0.2.tgz","fileCount":14,"unpackedSize":48814,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@sigstore%2ftuf@4.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCICrd7dblc10dk31RtZ1pQ6xEiqbb/dSO+kWKI6LAsgcgAiBKPWfzF6qjZtlFeAvUwRdZWxY2163+FON8fnhoWN8Xwg=="}],"size":18010},"_npmUser":{"name":"anonymous","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:e25c47bb-9288-408b-af93-254e27a1cbc8"}},"directories":{},"maintainers":[{"name":"anonymous","email":"brian@dehamer.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/tuf_4.0.2_1773863528933_0.3010204124147138"},"_hasShrinkwrap":false,"_cnpmcore_publish_time":"2026-03-18T19:52:09.099Z","publish_time":1773863529099,"_source_registry_name":"default","contributors":[]}},"dist-tags":{"latest":"4.0.2"},"name":"@sigstore/tuf","time":{"created":"2023-06-06T16:40:12.927Z","modified":"2026-03-18T19:52:23.144Z","1.0.0":"2023-06-06T15:15:03.416Z","1.0.1":"2023-06-30T16:36:29.939Z","1.0.2":"2023-06-30T17:14:57.848Z","1.0.3":"2023-07-19T16:10:34.914Z","2.0.0":"2023-08-18T16:05:36.195Z","2.1.0":"2023-08-29T15:40:24.007Z","2.2.0":"2023-09-08T17:20:34.664Z","2.3.0":"2024-01-12T20:56:35.390Z","2.3.1":"2024-02-15T18:03:31.161Z","2.3.2":"2024-03-25T16:01:41.021Z","2.3.3":"2024-05-08T23:23:18.342Z","2.3.4":"2024-05-16T17:12:04.001Z","3.0.0":"2024-10-14T16:13:47.166Z","3.1.0":"2025-02-04T20:35:48.506Z","3.1.1":"2025-04-25T20:55:48.418Z","4.0.0":"2025-07-29T23:16:47.816Z","4.0.1":"2025-12-19T16:49:00.396Z","4.0.2":"2026-03-18T19:52:09.099Z"},"readme":"# @sigstore/tuf &middot; [![npm version](https://img.shields.io/npm/v/@sigstore/tuf.svg?style=flat)](https://www.npmjs.com/package/@sigstore/tuf) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke Test Status](https://github.com/sigstore/sigstore-js/workflows/smoke-test/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)\n\nA JavaScript library for securely retrieving targets from the Sigstore [TUF][1]\nrepository.\n\n## Features\n\n- Embeds the trutsted root metadata file necessary to bootstrap interaction\n  with the Sigstore TUF repository.\n- Automatically initializes the local TUF cache for storing metadata and\n  target files.\n\n## Prerequisites\n\n- Node.js version ^20.17.0 || >=22.9.0\n\n## Installation\n\n```\nnpm install @sigstore/tuf\n```\n\n## Usage\n\n```javascript\nconst { initTUF } = require('@sigstore/tuf');\n```\n\n```javascript\nimport { initTUF } from '@sigstore/tuf';\n```\n\n### initTUF([options])\n\nReturns a TUF client which can be used to retrieve any target from the Sigstore\nTUF repository. The local TUF cache will be initialized and the TUF metadata\nfiles downloaded from the [remote repository][2] as part of the initialization\nprocess.\n\n- `options` `<Object>`\n  - `mirrorURL` `<string>`: Base URL for the Sigstore TUF repository. Defaults to `'https://tuf-repo-cdn.sigstore.dev'`\n  - `cachePath` `<string>`: Absolute path to the directory to be used for caching downloaded TUF metadata and targets. Defaults to a directory named \"sigstore-js\" within the platform-specific application data directory.\n  - `rootPath` `<string>`: Path to the initial trust root for the TUF repository. Defaults to the [embedded root](./store/public-good-instance-root.json).\n  - `forceInit` `boolean`: Force re-initialization of the TUF cache even if it already exists. Defaults to `false`.\n  - `forceCache` `boolean`: Prevents any downloads from the remote TUF repository as long as all cached metadata files are un-expired. Defaults to `false`.\n  - `force` `boolean`: Same as `forceInit` (deprecated).\n\nThe `TUF` client object returned from `initTUF` has a single `getTarget`\nfunction which takes the name of a target in the Sigstore TUF repository\nand returns the content of that target.\n\n### getTrustedRoot([options])\n\nRetrieves the most recent version of the \"trusted_root.json\" target from the\nSigstore TUF repository. The format of \"trusted_root.json\" file is described\nby the [TrustedRoot][3] protobuf and contains the complete set of trusted\nverification materials for the Sigstore public-good instance.\n\n- `options` `<Object>`\n  - `mirrorURL` `<string>`: Base URL for the Sigstore TUF repository. Defaults to `'https://tuf-repo-cdn.sigstore.dev'`\n  - `cachePath` `<string>`: Absolute path to the directory to be used for caching downloaded TUF metadata and targets. Defaults to a directory named \"sigstore-js\" within the platform-specific application data directory.\n  - `rootPath` `<string>`: Path to the initial trust root for the TUF repository. Defaults to the [embedded root](./store/public-good-instance-root.json).\n  - `forceInit` `boolean`: Force re-initialization of the TUF cache even if it already exists. Defaults to `false`.\n  - `forceCache` `boolean`: Prevents any downloads from the remote TUF repository as long as all cached metadata files are un-expired. Defaults to `false`.\n  - `force` `boolean`: Same as `forceInit` (deprecated).\n\n[1]: https://theupdateframework.io/\n[2]: https://sigstore-tuf-root.storage.googleapis.com/\n[3]: https://github.com/sigstore/protobuf-specs/blob/main/protos/sigstore_trustroot.proto","users":{}}