npm · npm:tuf-js
tuf-js active
JavaScript implementation of The Update Framework (TUF)
The latest stable version of tuf-js is 6.0.2, published on 2026-11-04. Verified by Vigia on 2026-11-12.
| Latest stable version | 6.0.2 |
|---|---|
| Published | 2026-11-04 20:44:35 UTC |
| Install | npm install tuf-js@latest |
| Requires (engines) | {"node":"^22.22.2 || ^24.15.0 || >=26.0.0"} |
| Peer dependencies | — |
| Dist-tags | latest: 6.0.2 |
| License | MIT |
| Advisories on latest version | none known |
| Last verified | 2026-11-12 22:47:53 UTC |
| Sources | api.deps.dev, registry.npmjs.org, registry.npmjs.org |
Ask your AI assistant to check this
AI models are trained up to a date, so they can be wrong about versions, deprecations and vulnerabilities. Paste this into Claude, ChatGPT, Perplexity or Cursor and it will answer with the verified data on this page:
Before answering about the npm package "tuf-js", check Vigia (verified, dated facts): https://vigia.coredls.cloud/v1/packages/npm/tuf-js . For my whole project use https://vigia.coredls.cloud/context
Using an AI coding agent every day? Connect Vigia once and it checks this by itself.
Maintenance
| Activity | active |
|---|---|
| Last stable release | 2026-11-04 20:44:35 UTC · 8 days ago |
| Stable releases in the last 12 months | 5 |
| Published versions | 29 |
Heuristic based only on release dates; it does not measure issue or security response times.
Version history
| Version | Published |
|---|---|
6.0.2 | 2026-11-04 20:44:35 UTC |
6.0.1 | 2026-10-29 18:27:09 UTC |
6.0.0 | 2026-06-01 20:17:31 UTC |
5.0.1 | 2026-04-09 03:10:06 UTC |
4.1.0 | 2025-12-18 22:03:29 UTC |
4.0.0 | 2025-07-25 17:45:17 UTC |
3.1.0 | 2025-07-02 16:02:17 UTC |
3.0.1 | 2024-10-14 15:37:35 UTC |
3.0.0 | 2024-10-09 17:02:59 UTC |
2.2.1 | 2024-05-06 17:30:27 UTC |
2.2.0 | 2024-01-10 20:43:35 UTC |
2.1.0 | 2023-08-24 22:39:14 UTC |
2.0.0 | 2023-08-17 17:57:40 UTC |
1.1.7 | 2023-06-12 15:02:10 UTC |
1.1.6 | 2023-05-10 00:01:38 UTC |
1.1.5 | 2023-05-03 17:46:39 UTC |
1.1.4 | 2023-04-18 18:58:21 UTC |
1.1.3 | 2023-04-11 19:59:06 UTC |
1.1.2 | 2023-03-21 20:47:48 UTC |
1.1.1 | 2023-03-03 20:13:41 UTC |
Showing the 20 most recent of 25 versions. JSON
Version compatibility
Newest stable version that declares support for each runtime version (from the requirements published with each version).
| Runtime | Newest compatible version |
|---|---|
node 16 | 2.2.1 |
node 18 | 3.1.0 |
node 20 | 5.0.1 |
node 22 | 6.0.2 |
node 24 | 6.0.2 |
Give your AI agent these facts
Vigia is a free MCP server: your coding agent checks versions, breaking changes and vulnerabilities before it writes code. No signup, no API key.
claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp
Add to CursorAdd to VS Code★ Star on GitHub
Any other MCP client
{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }Agent skill (SKILL.md): tells the agent when to use Vigia · GitHub Action for pull requests
Frequently asked questions
What is the latest version of tuf-js?
The latest stable version of tuf-js is 6.0.2, published on 2026-11-04. Verified by Vigia on 2026-11-12.
How do I install the latest version of tuf-js?
Run npm install tuf-js@latest. The latest stable version is 6.0.2 (verified 2026-11-12).
Is tuf-js deprecated?
No. tuf-js is not marked as deprecated in the registry.
Which Node.js version does tuf-js require?
tuf-js 6.0.2 declares this requirement: {"node":"^22.22.2 || ^24.15.0 || >=26.0.0"}.
Does tuf-js 6.0.2 have known vulnerabilities?
No known advisories affect tuf-js 6.0.2 according to the data Vigia checks.
Is tuf-js still maintained?
tuf-js published 5 stable releases in the last 12 months; the most recent was 8 days ago. Activity: active.
Observed changes
- Wed Nov 04 2026 22:44:31 GM +0000 (Coordinated Universal Time) — released 6.0.1 → 6.0.2
- Fri Oct 30 2026 14:41:35 GM +0000 (Coordinated Universal Time) — released 6.0.1 → 6.0.1
- hu Oct 29 2026 18:40:41 GMT+0000 (Coordinated Universal Time) — released 6.0.0 → 6.0.1
Related packages
- earcut
- fast-sha256
- @sinonjs/samsam
- @keyv/serialize
- openid-client
- postgres
- @commitlint/types
- create-ecdh
- @types/sizzle
- @jsep-plugin/assignment
- cookie-parser
- @radix-ui/react-toolbar
Badges for your README
Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:
[](https://vigia.coredls.cloud/npm/tuf-js) [](https://vigia.coredls.cloud/npm/tuf-js) [](https://vigia.coredls.cloud/npm/tuf-js)
For agents
GET https://vigia.coredls.cloud/v1/packages/npm/tuf-js
GET https://vigia.coredls.cloud/v1/packages/npm/tuf-js/versions/{version}