npm · npm:@sigstore/tuf
@sigstore/tuf active
Client for the Sigstore TUF repository
| Latest stable version | 5.0.0 |
|---|---|
| Published | 2026-06-01 21:02:52 UTC |
| Requires (engines) | {"node":"^22.22.2 || ^24.15.0 || >=26.0.0"} |
| Peer dependencies | — |
| Dist-tags | latest: 5.0.0 |
| License | Apache-2.0 |
| Advisories on latest version | none known |
| Last verified | 2026-09-28 08:57:10 UTC |
| Sources | registry.npmjs.org, registry.npmjs.org, api.deps.dev |
Maintenance
| Activity | active |
|---|---|
| Last stable release | 2026-06-01 21:02:52 UTC · 119 days ago |
| Stable releases in the last 12 months | 3 |
| Published versions | 19 |
Heuristic based only on release dates; it does not measure issue or security response times.
Version history
| Version | Published |
|---|---|
5.0.0 | 2026-06-01 21:02:52 UTC |
4.0.2 | 2026-03-18 19:52:09 UTC |
4.0.1 | 2025-12-19 16:49:00 UTC |
4.0.0 | 2025-07-29 23:16:47 UTC |
3.1.1 | 2025-04-25 20:55:48 UTC |
3.1.0 | 2025-02-04 20:35:48 UTC |
3.0.0 | 2024-10-14 16:13:47 UTC |
2.3.4 | 2024-05-16 17:12:04 UTC |
2.3.3 | 2024-05-08 23:23:18 UTC |
2.3.2 | 2024-03-25 16:01:41 UTC |
2.3.1 | 2024-02-15 18:03:31 UTC |
2.3.0 | 2024-01-12 20:56:35 UTC |
2.2.0 | 2023-09-08 17:20:34 UTC |
2.1.0 | 2023-08-29 15:40:24 UTC |
2.0.0 | 2023-08-18 16:05:36 UTC |
1.0.3 | 2023-07-19 16:10:34 UTC |
1.0.2 | 2023-06-30 17:14:57 UTC |
1.0.1 | 2023-06-30 16:36:29 UTC |
1.0.0 | 2023-06-06 15:15:03 UTC |
Showing the 19 most recent of 19 versions. JSON
Frequently asked questions
What is the latest version of @sigstore/tuf?
The latest stable version of @sigstore/tuf is 5.0.0, published on 2026-06-01. Verified by Vigia on 2026-09-28.
Is @sigstore/tuf deprecated?
No. @sigstore/tuf is not marked as deprecated in the registry.
Which Node.js version does @sigstore/tuf require?
@sigstore/tuf 5.0.0 declares this requirement: {"node":"^22.22.2 || ^24.15.0 || >=26.0.0"}.
Does @sigstore/tuf 5.0.0 have known vulnerabilities?
No known advisories affect @sigstore/tuf 5.0.0 according to the data Vigia checks.
Is @sigstore/tuf still maintained?
@sigstore/tuf published 3 stable releases in the last 12 months; the most recent was 119 days ago. Activity: active.
Observed changes
No changes observed yet since Vigia started tracking this package.
Related packages
- @volar/source-map
- istanbul-lib-hook
- @repeaterjs/repeater
- potpack
- date-format
- @module-federation/webpack-bundler-runtime
- @anthropic-ai/claude-code-linux-x64
- semver-regex
- find-versions
- @redis/json
- leac
- hast-util-from-html
For agents
GET https://vigia.coredls.cloud/v1/packages/npm/@sigstore/tuf
GET https://vigia.coredls.cloud/v1/packages/npm/@sigstore/tuf/versions/{version}