# @sigstore/bundle

> Sigstore bundle type

Latest version **5.0.0** (published 2026-06-01) · Apache-2.0 license · 0 weekly downloads

## Install

```sh
npm install @sigstore/bundle
pnpm add @sigstore/bundle
yarn add @sigstore/bundle
bun add @sigstore/bundle
```

## Health

**Score 65/100 (B)** — status: active.

Positive: has types; no vulnerabilities; has provenance; high maintenance score; high quality score.

Warnings: low downloads; no esm support.

## Facts

| | |
|---|---|
| Version | 5.0.0 |
| Published | 2026-06-01 |
| First published | 2023-07-19 |
| Weekly downloads | 0 |
| License | Apache-2.0 |
| TypeScript types | bundled |
| Module format | CommonJS |
| Node | ^22.22.2 \|\| ^24.15.0 \|\| >=26.0.0 |
| Dependencies | 1 |
| Unpacked size | 39.5 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Provenance | attested (GitHub Actions) |
| GitHub stars | 181 |
| Author | bdehamer@github.com |
| Maintainers | bdehamer |

## Links

- npm: https://www.npmjs.com/package/@sigstore/bundle
- Repository: https://github.com/sigstore/sigstore-js
- Homepage: https://github.com/sigstore/sigstore-js/tree/main/packages/bundle#readme
- Issues: https://github.com/sigstore/sigstore-js/issues
- npm.io page: https://npm.io/package/@sigstore/bundle

## Dependencies (1)

- [@sigstore/protobuf-specs](https://npm.io/package/@sigstore/protobuf-specs.md) ^0.5.0

## Recent versions

- 5.0.0 (latest) — 2026-06-01
- 4.0.0 — 2025-07-29
- 3.1.0 — 2025-02-04
- 3.0.0 — 2024-10-14
- 2.3.2 — 2024-05-16
- 2.3.1 — 2024-04-04
- 2.3.0 — 2024-04-02
- 2.2.0 — 2024-02-15
- 2.1.1 — 2024-01-12
- 2.1.0 — 2023-08-29
- 2.0.0 — 2023-08-18
- 1.1.0 — 2023-08-10
- 1.0.0 — 2023-07-19

## README

# @sigstore/bundle · [![npm version](https://img.shields.io/npm/v/@sigstore/bundle.svg?style=flat)](https://www.npmjs.com/package/@sigstore/bundle) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke Test Status](https://github.com/sigstore/sigstore-js/workflows/smoke-test/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)

A JavaScript library for working with the Sigstore bundle format.

## Features

- TypeScript types for the different Sigstore bundle versions.
- Bundle validation functions.
- Support for serializing/deserializing bundles to/from JSON.

## Prerequisites

- Node.js version ^22.22.2 || ^24.15.0 || >=26.0.0

## Installation

```
npm install @sigstore/bundle
```

---
_Source: https://npm.io/package/@sigstore/bundle · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._