npm · npm:@sigstore/core

@sigstore/core active

Base library for Sigstore

The latest stable version of @sigstore/core is 4.0.1, published on 2026-06-25. Verified by Vigia on 2026-11-12.

Latest stable version	4.0.1
Published	2026-06-25 22:33:24 UTC
Install	`npm install @sigstore/core@latest`
Requires (engines)	`{"node":"^22.22.2 \|\| ^24.15.0 \|\| >=26.0.0"}`
Peer dependencies	—
Dist-tags	`latest: 4.0.1`
License	Apache-2.0
Advisories on latest version	none known
Last verified	2026-11-12 15:15:42 UTC
Sources	api.deps.dev, registry.npmjs.org, registry.npmjs.org

Is your project affected?

Check my whole package.json Get notified of new versions (Atom)Facts for my AGENTS.md

Free, no signup. Paste your manifest and see what is outdated, deprecated or vulnerable.

Maintenance

Activity	active
Last stable release	2026-06-25 22:33:24 UTC · 140 days ago
Stable releases in the last 12 months	5
Published versions	11

Heuristic based only on release dates; it does not measure issue or security response times.

Version history

Version	Published
`4.0.1`	2026-06-25 22:33:24 UTC
`4.0.0`	2026-06-01 21:02:52 UTC
`3.2.1`	2026-05-22 21:24:32 UTC
`3.2.0`	2026-03-18 19:52:09 UTC
`3.1.0`	2025-12-19 16:49:00 UTC
`3.0.0`	2025-07-29 23:16:48 UTC
`2.0.0`	2024-10-14 16:13:47 UTC
`1.1.0`	2024-03-25 16:01:41 UTC
`1.0.0`	2024-02-08 23:12:02 UTC
`0.2.0`	2024-01-12 20:56:35 UTC
`0.1.0`	2023-12-04 18:48:41 UTC

Showing the 11 most recent of 11 versions. JSON

Version compatibility

Newest stable version that declares support for each runtime version (from the requirements published with each version).

Runtime	Newest compatible version
`node 16`	`1.1.0`
`node 18`	`2.0.0`
`node 20`	`3.2.1`
`node 22`	`4.0.1`
`node 24`	`4.0.1`

Give your AI agent these facts

Vigia is a free MCP server: your coding agent checks versions, breaking changes and vulnerabilities before it writes code. No signup, no API key.

claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp

Add to Cursor Add to VS Code ★ Star on GitHub

Any other MCP client

{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }

Agent skill (SKILL.md): tells the agent when to use Vigia · GitHub Action for pull requests

Frequently asked questions

What is the latest version of @sigstore/core?

The latest stable version of @sigstore/core is 4.0.1, published on 2026-06-25. Verified by Vigia on 2026-11-12.

How do I install the latest version of @sigstore/core?

Run npm install @sigstore/core@latest. The latest stable version is 4.0.1 (verified 2026-11-12).

Is @sigstore/core deprecated?

No. @sigstore/core is not marked as deprecated in the registry.

Which Node.js version does @sigstore/core require?

@sigstore/core 4.0.1 declares this requirement: {"node":"^22.22.2 || ^24.15.0 || >=26.0.0"}.

Does @sigstore/core 4.0.1 have known vulnerabilities?

No known advisories affect @sigstore/core 4.0.1 according to the data Vigia checks.

Is @sigstore/core still maintained?

@sigstore/core published 5 stable releases in the last 12 months; the most recent was 140 days ago. Activity: active.

Observed changes

No changes observed yet since Vigia started tracking this package.

Related packages

Badges for your README

Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:

[![version](https://vigia.coredls.cloud/badge/npm/@sigstore/core/version.svg)](https://vigia.coredls.cloud/npm/@sigstore/core)
[![maintained](https://vigia.coredls.cloud/badge/npm/@sigstore/core/maintained.svg)](https://vigia.coredls.cloud/npm/@sigstore/core)
[![status](https://vigia.coredls.cloud/badge/npm/@sigstore/core/status.svg)](https://vigia.coredls.cloud/npm/@sigstore/core)

For agents

GET https://vigia.coredls.cloud/v1/packages/npm/@sigstore/core
GET https://vigia.coredls.cloud/v1/packages/npm/@sigstore/core/versions/{version}