sigstore
npmactive
sigstore last released 5.0.0 on 2026-06-01. Its latest version requires Node.js ^22.22.2 || ^24.15.0 || >=26.0.0.
Facts
- Latest release
- 5.0.0, (4 months ago)
- First published
- (4 years ago)
- Releases in the last 12 months
- 3
- Median days between releases
- 143
- Median days between major versions
- 288
- Monthly downloads
- 41,117,679
- License
- Apache-2.0
- Repository
- github.com/sigstore/sigstore-js
- Source
- registry.npmjs.org (checked 2026-10-19)
Major versions
6 major versions have been published.
| Major | First version | First released | Latest version | Latest released |
|---|---|---|---|---|
| 5 | 5.0.0 | 2026-06-01 | 5.0.0 | 2026-06-01 |
| 4 | 4.0.0 | 2025-07-29 | 4.1.1 | 2026-05-22 |
| 3 | 3.0.0 | 2024-10-14 | 3.1.0 | 2025-02-04 |
| 2 | 2.0.0 | 2023-08-18 | 2.3.1 | 2024-05-16 |
| 1 | 1.0.0 | 2023-02-09 | 1.9.0 | 2023-08-10 |
| 0 | 0.0.0 | 2022-08-08 | 0.4.0 | 2023-01-11 |
Runtime requirements
The latest version of sigstore declares these runtime constraints.
| Runtime | Constraint | Minimum version | Since version | Since |
|---|---|---|---|---|
| Node.js | ^22.22.2 || ^24.15.0 || >=26.0.0 | 22.22.2 | 5.0.0 | 2026-06-01 |
Supported runtimes
The latest version of sigstore runs on 4 tracked runtime releases.
Keelbench tracks end-of-life dates for 469 products, updated daily. Check your repositories against these dates with Deps.