https://github.com/ceejbot/verify-npm-signature

verify the npm registry's pgp signature on a package-version
https://github.com/ceejbot/verify-npm-signature

Last synced: about 1 year ago
JSON representation

verify the npm registry's pgp signature on a package-version

• Host: GitHub
• URL: https://github.com/ceejbot/verify-npm-signature
• Owner: ceejbot
• License: isc
• Created: 2018-06-07T18:08:20.000Z (about 8 years ago)
• Default Branch: master
• Last Pushed: 2018-06-08T15:40:00.000Z (about 8 years ago)
• Last Synced: 2024-09-18T06:52:52.938Z (almost 2 years ago)
• Language: JavaScript
• Homepage:
• Size: 43.9 KB
• Stars: 16
• Watchers: 4
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# verify-npm-signature

Verify the npm registry's pgp signature for a package version, one stop shopping edition. This tool requires that you have the [Keybase command-line tool](https://keybase.io/download) already installed.

Usage:

	npx verify-npm-signature esm@3.0.48

	verify-npm-signature lodash@4.17.10

	vns @slack/client@4.3.1

Note that many older packages don't have signatures yet, so the lack of a signature does not *yet* indicate anything is wrong.

## LICENSE

ISC.