@sigstore/tuf
npmactive
@sigstore/tuf last released 5.0.0 on 2026-06-01. Its latest version requires Node.js ^22.22.2 || ^24.15.0 || >=26.0.0.
Facts
- Latest release
- 5.0.0, (4 months ago)
- First published
- (3 years ago)
- Releases in the last 12 months
- 3
- Median days between releases
- 92
- Median days between major versions
- 298
- Monthly downloads
- 41,099,544
- License
- Apache-2.0
- Repository
- github.com/sigstore/sigstore-js
- Source
- registry.npmjs.org (checked 2026-10-19)
Major versions
5 major versions have been published.
| Major | First version | First released | Latest version | Latest released |
|---|---|---|---|---|
| 5 | 5.0.0 | 2026-06-01 | 5.0.0 | 2026-06-01 |
| 4 | 4.0.0 | 2025-07-29 | 4.0.2 | 2026-03-18 |
| 3 | 3.0.0 | 2024-10-14 | 3.1.1 | 2025-04-25 |
| 2 | 2.0.0 | 2023-08-18 | 2.3.4 | 2024-05-16 |
| 1 | 1.0.0 | 2023-06-06 | 1.0.3 | 2023-07-19 |
Runtime requirements
The latest version of @sigstore/tuf declares these runtime constraints.
| Runtime | Constraint | Minimum version | Since version | Since |
|---|---|---|---|---|
| Node.js | ^22.22.2 || ^24.15.0 || >=26.0.0 | 22.22.2 | 5.0.0 | 2026-06-01 |
Supported runtimes
The latest version of @sigstore/tuf runs on 4 tracked runtime releases.
Keelbench tracks end-of-life dates for 469 products, updated daily. Check your repositories against these dates with Deps.