Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
By Sarah Gooding - Sep 18, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@sigstore/verify
Advanced tools
@sigstore/verify · 
A library for verifying Sigstore signatures.
Prerequisites
- Node.js version ^22.22.2 || ^24.15.0 || >=26.0.0
Other packages similar to @sigstore/verify
openpgp
The openpgp package provides a comprehensive suite of OpenPGP encryption, decryption, and key management functionalities. While it also focuses on verifying the integrity and authenticity of data, it uses the OpenPGP standard, which is different from the Sigstore approach utilized by @sigstore/verify.
jsonwebtoken
jsonwebtoken is a package for implementing JSON Web Tokens (JWT). It allows for the creation and verification of JWTs for secure transmission of information between parties. Although it deals with the concept of verifying tokens, it is more focused on authentication and information exchange rather than verifying software artifacts like @sigstore/verify.
FAQs
Verification of Sigstore signatures
The npm package @sigstore/verify receives a total of 5,072,934 weekly downloads. As such, @sigstore/verify popularity was classified as popular.
We found that @sigstore/verify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 04 Aug 2026
Related posts
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
By Karlo Zanki - Sep 17, 2026
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
By Sarah Gooding - Sep 16, 2026