licenses.dev

@sigstore/tuf v4.0.1

Client for the Sigstore TUF repository

Published on

Licenses

Learn more about license information.

Package Licenses

Apache-2.0

Dependency Licenses

MIT23
PackageRelationDependenciesPublished
@gar/promise-retry • 1.0.2Retries a function that returns a promise, leveraging the power of the retry module.INDIRECT1
@tufjs/canonical-json • 2.0.0OLPC JSON canonicalizationINDIRECT0
@tufjs/models • 4.1.0TUF metadata modelsINDIRECT4
agent-base • 7.1.4Turn a function into an `http.Agent` instanceINDIRECT0
balanced-match • 4.0.4Match balanced character pairs, like "{" and "}"INDIRECT0
brace-expansion • 5.0.4Brace expansion as known from sh/bashINDIRECT1
debug • 4.4.3Lightweight debugging utility for Node.js and the browserINDIRECT1
http-proxy-agent • 7.0.2An HTTP(s) proxy `http.Agent` implementation for HTTPINDIRECT3
https-proxy-agent • 7.0.6An HTTP(s) proxy `http.Agent` implementation for HTTPSINDIRECT3
iconv-lite • 0.7.2Convert character encodings in pure javascript.INDIRECT1
imurmurhash • 0.1.4An incremental implementation of MurmurHash3INDIRECT0
ip-address • 10.1.0A library for parsing IPv4 and IPv6 IP addresses in node and the browser.INDIRECT0
minipass-fetch • 5.0.2An implementation of window.fetch in Node.js using Minipass streamsINDIRECT5
minizlib • 3.1.0A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.INDIRECT1
ms • 2.1.3Tiny millisecond conversion utilityINDIRECT0
negotiator • 1.0.0HTTP content negotiationINDIRECT0
p-map • 7.0.4Map over promises concurrentlyINDIRECT0
retry • 0.13.1Abstraction for exponential and custom retry strategies for failed operations.INDIRECT0
safer-buffer • 2.1.2Modern Buffer API polyfill without footgunsINDIRECT0
smart-buffer • 4.2.0smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.INDIRECT0
socks-proxy-agent • 8.0.5A SOCKS proxy `http.Agent` implementation for HTTP and HTTPSINDIRECT6
socks • 2.8.7Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.INDIRECT2
tuf-js • 4.1.0JavaScript implementation of The Update Framework (TUF)DIRECT44
ISC16
PackageRelationDependenciesPublished
@npmcli/agent • 4.0.0the http/https agent used by the npm cliINDIRECT10
@npmcli/fs • 5.0.0filesystem utilities for the npm cliINDIRECT1
cacache • 20.0.3Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.INDIRECT20
fs-minipass • 3.0.3fs read and write streams based on minipassINDIRECT1
make-fetch-happen • 15.0.4Opinionated, caching, retrying fetch clientINDIRECT41
minipass-collect • 2.0.1A Minipass stream that collects all the data into a single chunkINDIRECT1
minipass-flush • 1.0.5A Minipass stream that calls a flush function before emitting 'end'INDIRECT2
minipass-pipeline • 1.2.4create a pipeline of streams using MinipassINDIRECT2
minipass-sized • 2.0.0A Minipass stream that raises an error if you get a different number of bytes than expectedINDIRECT1
minipass • 3.3.6minimal implementation of a PassThrough streamINDIRECT1
proc-log • 6.1.0just emit 'log' events on the process objectINDIRECT0
semver • 7.7.4The semantic version parser used by npm.INDIRECT0
ssri • 13.0.1Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.INDIRECT1
unique-filename • 5.0.0Generate a unique filename for use in temporary directories or caches.INDIRECT2
unique-slug • 6.0.0Generate a unique character string suitible for use in files and URLs.INDIRECT1
yallist • 4.0.0Yet Another Linked ListINDIRECT0
BlueOak-1.0.05
PackageRelationDependenciesPublished
glob • 13.0.6the most correct and second fastest glob implementation in JavaScriptINDIRECT6
lru-cache • 11.2.7A cache object that deletes the least-recently-used items.INDIRECT0
minimatch • 10.2.4a glob matcher in javascriptINDIRECT2
minipass • 7.1.3minimal implementation of a PassThrough streamINDIRECT0
path-scurry • 2.0.2walk paths fast and efficientlyINDIRECT2
Apache-2.01
PackageRelationDependenciesPublished
@sigstore/protobuf-specs • 0.5.0code-signing for npm packagesDIRECT0
BSD-2-Clause1
PackageRelationDependenciesPublished
http-cache-semantics • 4.2.0Parses Cache-Control and other headers. Helps building correct HTTP caches and proxiesINDIRECT0
Last updated on

Copy the licenses badge code for the latest version:

[![licenses](https://licenses.dev/b/npm/%40sigstore%2Ftuf)](https://licenses.dev/npm/%40sigstore%2Ftuf)
<a href="https://licenses.dev/npm/%40sigstore%2Ftuf">
  <img src="https://licenses.dev/b/npm/%40sigstore%2Ftuf" alt="licenses" />
</a>

Or the licenses badge code for the 4.0.1 version:

[![licenses](https://licenses.dev/b/npm/%40sigstore%2Ftuf/4.0.1)](https://licenses.dev/npm/%40sigstore%2Ftuf/4.0.1)
<a href="https://licenses.dev/npm/%40sigstore%2Ftuf/4.0.1">
  <img src="https://licenses.dev/b/npm/%40sigstore%2Ftuf/4.0.1" alt="licenses" />
</a>
GitHub