@sigstore/bundle
npmactive
@sigstore/bundle last released 5.0.0 on 2026-06-01. Its latest version requires Node.js ^22.22.2 || ^24.15.0 || >=26.0.0.
Facts
- Latest release
- 5.0.0, (4 months ago)
- First published
- (3 years ago)
- Releases in the last 12 months
- 1
- Median days between releases
- 175
- Median days between major versions
- 298
- Monthly downloads
- 44,430,957
- License
- Apache-2.0
- Repository
- github.com/sigstore/sigstore-js
- Source
- registry.npmjs.org (checked 2026-10-19)
Major versions
5 major versions have been published.
| Major | First version | First released | Latest version | Latest released |
|---|---|---|---|---|
| 5 | 5.0.0 | 2026-06-01 | 5.0.0 | 2026-06-01 |
| 4 | 4.0.0 | 2025-07-29 | 4.0.0 | 2025-07-29 |
| 3 | 3.0.0 | 2024-10-14 | 3.1.0 | 2025-02-04 |
| 2 | 2.0.0 | 2023-08-18 | 2.3.2 | 2024-05-16 |
| 1 | 1.0.0 | 2023-07-19 | 1.1.0 | 2023-08-10 |
Runtime requirements
The latest version of @sigstore/bundle declares these runtime constraints.
| Runtime | Constraint | Minimum version | Since version | Since |
|---|---|---|---|---|
| Node.js | ^22.22.2 || ^24.15.0 || >=26.0.0 | 22.22.2 | 5.0.0 | 2026-06-01 |
Supported runtimes
The latest version of @sigstore/bundle runs on 4 tracked runtime releases.
Keelbench tracks end-of-life dates for 469 products, updated daily. Check your repositories against these dates with Deps.