Vigia

npm · npm:@sigstore/tuf

@sigstore/tuf active

Client for the Sigstore TUF repository

The latest stable version of @sigstore/tuf is 5.0.1, published on 2026-11-05. Verified by Vigia on 2026-11-13.

Latest stable version5.0.1
Published2026-11-05 00:19:12 UTC
Installnpm install @sigstore/tuf@latest
Requires (engines){"node":"^22.22.2 || ^24.15.0 || >=26.0.0"}
Peer dependencies—
Dist-tagslatest: 5.0.1
LicenseApache-2.0
Advisories on latest versionnone known
Last verified2026-11-13 01:02:47 UTC
Sourcesapi.deps.dev, registry.npmjs.org, registry.npmjs.org

Is your project affected?

Check my whole package.jsonGet notified of new versions (Atom)Facts for my AGENTS.md

Free, no signup. Paste your manifest and see what is outdated, deprecated or vulnerable.

Maintenance

Activityactive
Last stable release2026-11-05 00:19:12 UTC · 8 days ago
Stable releases in the last 12 months4
Published versions20

Heuristic based only on release dates; it does not measure issue or security response times.

Version history

VersionPublished
5.0.12026-11-05 00:19:12 UTC
5.0.02026-06-01 21:02:52 UTC
4.0.22026-03-18 19:52:09 UTC
4.0.12025-12-19 16:49:00 UTC
4.0.02025-07-29 23:16:47 UTC
3.1.12025-04-25 20:55:48 UTC
3.1.02025-02-04 20:35:48 UTC
3.0.02024-10-14 16:13:47 UTC
2.3.42024-05-16 17:12:04 UTC
2.3.32024-05-08 23:23:18 UTC
2.3.22024-03-25 16:01:41 UTC
2.3.12024-02-15 18:03:31 UTC
2.3.02024-01-12 20:56:35 UTC
2.2.02023-09-08 17:20:34 UTC
2.1.02023-08-29 15:40:24 UTC
2.0.02023-08-18 16:05:36 UTC
1.0.32023-07-19 16:10:34 UTC
1.0.22023-06-30 17:14:57 UTC
1.0.12023-06-30 16:36:29 UTC
1.0.02023-06-06 15:15:03 UTC

Showing the 20 most recent of 20 versions. JSON

Version compatibility

Newest stable version that declares support for each runtime version (from the requirements published with each version).

RuntimeNewest compatible version
node 162.3.4
node 183.1.1
node 204.0.2
node 225.0.1
node 245.0.1

Give your AI agent these facts

Vigia is a free MCP server: your coding agent checks versions, breaking changes and vulnerabilities before it writes code. No signup, no API key.

claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp

Add to CursorAdd to VS Code★ Star on GitHub

Any other MCP client
{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }

Agent skill (SKILL.md): tells the agent when to use Vigia · GitHub Action for pull requests

Frequently asked questions

What is the latest version of @sigstore/tuf?

The latest stable version of @sigstore/tuf is 5.0.1, published on 2026-11-05. Verified by Vigia on 2026-11-13.

How do I install the latest version of @sigstore/tuf?

Run npm install @sigstore/tuf@latest. The latest stable version is 5.0.1 (verified 2026-11-13).

Is @sigstore/tuf deprecated?

No. @sigstore/tuf is not marked as deprecated in the registry.

Which Node.js version does @sigstore/tuf require?

@sigstore/tuf 5.0.1 declares this requirement: {"node":"^22.22.2 || ^24.15.0 || >=26.0.0"}.

Does @sigstore/tuf 5.0.1 have known vulnerabilities?

No known advisories affect @sigstore/tuf 5.0.1 according to the data Vigia checks.

Is @sigstore/tuf still maintained?

@sigstore/tuf published 4 stable releases in the last 12 months; the most recent was 8 days ago. Activity: active.

Observed changes

Related packages

Badges for your README

Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:

[![version](https://vigia.coredls.cloud/badge/npm/@sigstore/tuf/version.svg)](https://vigia.coredls.cloud/npm/@sigstore/tuf)
[![maintained](https://vigia.coredls.cloud/badge/npm/@sigstore/tuf/maintained.svg)](https://vigia.coredls.cloud/npm/@sigstore/tuf)
[![status](https://vigia.coredls.cloud/badge/npm/@sigstore/tuf/status.svg)](https://vigia.coredls.cloud/npm/@sigstore/tuf)

For agents

GET https://vigia.coredls.cloud/v1/packages/npm/@sigstore/tuf
GET https://vigia.coredls.cloud/v1/packages/npm/@sigstore/tuf/versions/{version}