@sigstore/sign
Advanced tools
@sigstore/sign - npm Package Compare versions
+8
-8
| { | ||
| "name": "@sigstore/sign", | ||
| "version": "3.1.0", | ||
| "version": "4.0.0", | ||
| "description": "Sigstore signing library", | ||
@@ -30,4 +30,4 @@ "main": "dist/index.js", | ||
| "@sigstore/jest": "^0.0.0", | ||
| "@sigstore/mock": "^0.10.0", | ||
| "@sigstore/rekor-types": "^3.0.0", | ||
| "@sigstore/mock": "^0.11.0", | ||
| "@sigstore/rekor-types": "^4.0.0", | ||
| "@types/make-fetch-happen": "^10.0.4", | ||
@@ -37,6 +37,6 @@ "@types/promise-retry": "^1.1.6" | ||
| "dependencies": { | ||
| "@sigstore/bundle": "^3.1.0", | ||
| "@sigstore/core": "^2.0.0", | ||
| "@sigstore/protobuf-specs": "^0.4.0", | ||
| "make-fetch-happen": "^14.0.2", | ||
| "@sigstore/bundle": "^4.0.0", | ||
| "@sigstore/core": "^3.0.0", | ||
| "@sigstore/protobuf-specs": "^0.5.0", | ||
| "make-fetch-happen": "^15.0.0", | ||
| "proc-log": "^5.0.0", | ||
@@ -46,4 +46,4 @@ "promise-retry": "^2.0.1" | ||
| "engines": { | ||
| "node": "^18.17.0 || >=20.5.0" | ||
| "node": "^20.17.0 || >=22.9.0" | ||
| } | ||
| } |
+1
-1
@@ -16,3 +16,3 @@ # @sigstore/sign · [](https://www.npmjs.com/package/@sigstore/sign) [](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml) | ||
| - Node.js version >= 18.17.0 | ||
| - Node.js version ^20.17.0 || >=22.9.0 | ||
@@ -19,0 +19,0 @@ ## Installation |
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 2 instances in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Fixed alerts
Network access
Supply chain riskThis module accesses the network.
Found 2 instances in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Improved metrics
- Total package byte prevSize
85607
0.01%Dependency changes
+ Added
@gar/promise-retry@1.0.3(transitive)+ Added
@npmcli/agent@4.0.0(transitive)+ Added
@npmcli/fs@5.0.0(transitive)+ Added
@npmcli/redact@4.0.0(transitive)+ Added
@sigstore/bundle@4.0.0(transitive)+ Added
@sigstore/core@3.2.0(transitive)+ Added
@sigstore/protobuf-specs@0.5.0(transitive)+ Added
balanced-match@4.0.4(transitive)+ Added
brace-expansion@5.0.5(transitive)+ Added
cacache@20.0.4(transitive)+ Added
glob@13.0.6(transitive)+ Added
iconv-lite@0.7.2(transitive)+ Added
lru-cache@11.2.7(transitive)+ Added
make-fetch-happen@15.0.5(transitive)+ Added
minimatch@10.2.5(transitive)+ Added
minipass-fetch@5.0.2(transitive)+ Added
minipass-sized@2.0.0(transitive)+ Added
path-scurry@2.0.2(transitive)+ Added
proc-log@6.1.0(transitive)+ Added
ssri@13.0.1(transitive)- Removed
@isaacs/cliui@8.0.2(transitive)- Removed
@isaacs/fs-minipass@4.0.1(transitive)- Removed
@npmcli/agent@3.0.0(transitive)- Removed
@npmcli/fs@4.0.0(transitive)- Removed
@pkgjs/parseargs@0.11.0(transitive)- Removed
@sigstore/bundle@3.1.0(transitive)- Removed
@sigstore/core@2.0.0(transitive)- Removed
@sigstore/protobuf-specs@0.4.3(transitive)- Removed
ansi-regex@5.0.16.2.2(transitive)- Removed
ansi-styles@4.3.06.2.3(transitive)- Removed
balanced-match@1.0.2(transitive)- Removed
brace-expansion@2.0.3(transitive)- Removed
cacache@19.0.1(transitive)- Removed
chownr@3.0.0(transitive)- Removed
color-convert@2.0.1(transitive)- Removed
color-name@1.1.4(transitive)- Removed
cross-spawn@7.0.6(transitive)- Removed
eastasianwidth@0.2.0(transitive)- Removed
emoji-regex@8.0.09.2.2(transitive)- Removed
encoding@0.1.13(transitive)- Removed
foreground-child@3.3.1(transitive)- Removed
glob@10.5.0(transitive)- Removed
iconv-lite@0.6.3(transitive)- Removed
imurmurhash@0.1.4(transitive)- Removed
is-fullwidth-code-point@3.0.0(transitive)- Removed
isexe@2.0.0(transitive)- Removed
jackspeak@3.4.3(transitive)- Removed
lru-cache@10.4.3(transitive)- Removed
make-fetch-happen@14.0.3(transitive)- Removed
minimatch@9.0.9(transitive)- Removed
minipass-fetch@4.0.1(transitive)- Removed
minipass-sized@1.0.3(transitive)- Removed
package-json-from-dist@1.0.1(transitive)- Removed
path-key@3.1.1(transitive)- Removed
path-scurry@1.11.1(transitive)- Removed
shebang-command@2.0.0(transitive)- Removed
shebang-regex@3.0.0(transitive)- Removed
signal-exit@4.1.0(transitive)- Removed
ssri@12.0.0(transitive)- Removed
string-width@4.2.35.1.2(transitive)- Removed
strip-ansi@6.0.17.2.0(transitive)- Removed
tar@7.5.13(transitive)- Removed
unique-filename@4.0.0(transitive)- Removed
unique-slug@5.0.0(transitive)- Removed
which@2.0.2(transitive)- Removed
wrap-ansi@7.0.08.1.0(transitive)- Removed
yallist@5.0.0(transitive)Updated
@sigstore/bundle@^4.0.0Updated
@sigstore/core@^3.0.0Updated
make-fetch-happen@^15.0.0