licenses.dev

sigstore v4.1.0

code-signing for npm packages

Published on

Licenses

Learn more about license information.

Package Licenses

Apache-2.0

Dependency Licenses

MIT26
PackageRelationDependenciesPublished
@gar/promise-retry • 1.0.2Retries a function that returns a promise, leveraging the power of the retry module.INDIRECT1
@tufjs/canonical-json • 2.0.0OLPC JSON canonicalizationINDIRECT0
@tufjs/models • 4.1.0TUF metadata modelsINDIRECT4
agent-base • 7.1.4Turn a function into an `http.Agent` instanceINDIRECT0
balanced-match • 4.0.4Match balanced character pairs, like "{" and "}"INDIRECT0
brace-expansion • 5.0.4Brace expansion as known from sh/bashINDIRECT1
debug • 4.4.3Lightweight debugging utility for Node.js and the browserINDIRECT1
err-code • 2.0.3Create an error with a codeINDIRECT0
http-proxy-agent • 7.0.2An HTTP(s) proxy `http.Agent` implementation for HTTPINDIRECT3
https-proxy-agent • 7.0.6An HTTP(s) proxy `http.Agent` implementation for HTTPSINDIRECT3
iconv-lite • 0.7.2Convert character encodings in pure javascript.INDIRECT1
imurmurhash • 0.1.4An incremental implementation of MurmurHash3INDIRECT0
ip-address • 10.1.0A library for parsing IPv4 and IPv6 IP addresses in node and the browser.INDIRECT0
minipass-fetch • 5.0.2An implementation of window.fetch in Node.js using Minipass streamsINDIRECT5
minizlib • 3.1.0A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.INDIRECT1
ms • 2.1.3Tiny millisecond conversion utilityINDIRECT0
negotiator • 1.0.0HTTP content negotiationINDIRECT0
p-map • 7.0.4Map over promises concurrentlyINDIRECT0
promise-retry • 2.0.1Retries a function that returns a promise, leveraging the power of the retry module.INDIRECT2
retry • 0.12.0Abstraction for exponential and custom retry strategies for failed operations.INDIRECT0
retry • 0.13.1Abstraction for exponential and custom retry strategies for failed operations.INDIRECT0
safer-buffer • 2.1.2Modern Buffer API polyfill without footgunsINDIRECT0
smart-buffer • 4.2.0smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.INDIRECT0
socks-proxy-agent • 8.0.5A SOCKS proxy `http.Agent` implementation for HTTP and HTTPSINDIRECT6
socks • 2.8.7Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.INDIRECT2
tuf-js • 4.1.0JavaScript implementation of The Update Framework (TUF)INDIRECT44
ISC16
PackageRelationDependenciesPublished
@npmcli/agent • 4.0.0the http/https agent used by the npm cliINDIRECT10
@npmcli/fs • 5.0.0filesystem utilities for the npm cliINDIRECT1
cacache • 20.0.3Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.INDIRECT20
fs-minipass • 3.0.3fs read and write streams based on minipassINDIRECT1
make-fetch-happen • 15.0.4Opinionated, caching, retrying fetch clientINDIRECT41
minipass-collect • 2.0.1A Minipass stream that collects all the data into a single chunkINDIRECT1
minipass-flush • 1.0.5A Minipass stream that calls a flush function before emitting 'end'INDIRECT2
minipass-pipeline • 1.2.4create a pipeline of streams using MinipassINDIRECT2
minipass-sized • 2.0.0A Minipass stream that raises an error if you get a different number of bytes than expectedINDIRECT1
minipass • 3.3.6minimal implementation of a PassThrough streamINDIRECT1
proc-log • 6.1.0just emit 'log' events on the process objectINDIRECT0
semver • 7.7.4The semantic version parser used by npm.INDIRECT0
ssri • 13.0.1Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.INDIRECT1
unique-filename • 5.0.0Generate a unique filename for use in temporary directories or caches.INDIRECT2
unique-slug • 6.0.0Generate a unique character string suitible for use in files and URLs.INDIRECT1
yallist • 4.0.0Yet Another Linked ListINDIRECT0
Apache-2.06
PackageRelationDependenciesPublished
@sigstore/bundle • 4.0.0Sigstore bundle typeDIRECT1
@sigstore/core • 3.1.0Base library for SigstoreDIRECT0
@sigstore/protobuf-specs • 0.5.0code-signing for npm packagesDIRECT0
@sigstore/sign • 4.1.0Sigstore signing libraryDIRECT48
@sigstore/tuf • 4.0.1Client for the Sigstore TUF repositoryDIRECT46
@sigstore/verify • 3.1.0Verification of Sigstore signaturesDIRECT3
BlueOak-1.0.05
PackageRelationDependenciesPublished
glob • 13.0.6the most correct and second fastest glob implementation in JavaScriptINDIRECT6
lru-cache • 11.2.7A cache object that deletes the least-recently-used items.INDIRECT0
minimatch • 10.2.4a glob matcher in javascriptINDIRECT2
minipass • 7.1.3minimal implementation of a PassThrough streamINDIRECT0
path-scurry • 2.0.2walk paths fast and efficientlyINDIRECT2
BSD-2-Clause1
PackageRelationDependenciesPublished
http-cache-semantics • 4.2.0Parses Cache-Control and other headers. Helps building correct HTTP caches and proxiesINDIRECT0
Last updated on

Copy the licenses badge code for the latest version:

[![licenses](https://licenses.dev/b/npm/sigstore)](https://licenses.dev/npm/sigstore)
<a href="https://licenses.dev/npm/sigstore">
  <img src="https://licenses.dev/b/npm/sigstore" alt="licenses" />
</a>

Or the licenses badge code for the 4.1.0 version:

[![licenses](https://licenses.dev/b/npm/sigstore/4.1.0)](https://licenses.dev/npm/sigstore/4.1.0)
<a href="https://licenses.dev/npm/sigstore/4.1.0">
  <img src="https://licenses.dev/b/npm/sigstore/4.1.0" alt="licenses" />
</a>
GitHub