Skip to content
JS
Package

sigstore

code-signing for npm packages

v5.0.0, 1 Jun 2026Apache-2.0CommonJSTypes: Bundled
$ npm install sigstore

Key numbers

As of 25 Sept 2026
Weekly downloads
8.3m
+42% over 12 months
Gzip bundle size
-
No Bundlephobia data
Dependencies
6
Direct, from package.json
Last release
3 months ago
v5.0.0
GitHub stars
-
Open issues / PRs
- / -
Contributors
-
Commits, last 52 weeks
-

Downloads

Last week 2026-09-15 to 2026-09-21
05m10m15mSept 2025Mar 2026Sept 2026High 11.5m (25 Aug 2026)Low 3.2m (23 Dec 2025)
Weekly npm downloads, one point per week, weeks starting 23 Sept 2025 to 15 Sept 2026. The y axis starts at zero.

8,290,910 downloads last week, 39,606,335 in the last month. The 12-month change of +42% compares the average of the last 4 weeks with the first 4 weeks of the series.

Releases, last 12 months
334 in total
Latest version
5.0.0, 1 Jun 20263 months ago
First published
8 Aug 2022
Last push to GitHub
-
Repository archived
-
Open issues
-
Open pull requests
-
Commits, last 52 weeks
-
Dependents on npm
78

Major versions

  1. v5 first release 5.0.0, 1 Jun 2026
  2. v4 first release 4.0.0, 29 Jul 2025
  3. v3 first release 3.0.0, 14 Oct 2024
  4. v2 first release 2.0.0, 18 Aug 2023
  5. v1 first release 1.0.0, 9 Feb 2023
  6. v0 first release 0.0.0, 8 Aug 2022

Recent releases

VersionPublished
5.0.01 Jun 2026
4.1.122 May 2026
4.1.019 Dec 2025
4.0.029 Jul 2025
3.1.04 Feb 2025
3.0.014 Oct 2024
2.3.116 May 2024
2.3.04 Apr 2024
2.2.215 Feb 2024
2.2.18 Feb 2024
2.2.012 Jan 2024
2.1.029 Aug 2023
2.0.018 Aug 2023
1.9.010 Aug 2023
Module format
CommonJSFrom package.json type, main and exports fields
TypeScript types
Bundled
Node.js engine range
^22.22.2 || ^24.15.0 || >=26.0.0
Runtimes
-
Unpacked size (npm)
37 kB
Dependencies (6)
@sigstore/tuf@sigstore/core@sigstore/sign@sigstore/bundle@sigstore/verify@sigstore/protobuf-specs
npm install sigstore
  • jsDelivrhttps://cdn.jsdelivr.net/npm/sigstore@5.0.0/
  • unpkghttps://unpkg.com/sigstore@5.0.0/
  • esm.shhttps://esm.sh/sigstore@5.0.0
Sources: npm registry, npm downloads API. Data fetched 25 Sept 2026.

Indexability: Not indexed (discovery only): GitHub data not fetched yet; no category.