# @sigstore/core

> Base library for Sigstore

Latest version **4.0.1** (published 2026-06-25) · Apache-2.0 license · 0 weekly downloads

## Install

```sh
npm install @sigstore/core
pnpm add @sigstore/core
yarn add @sigstore/core
bun add @sigstore/core
```

## Health

**Score 70/100 (B)** — status: active.

Positive: has types; no vulnerabilities; has provenance; recently updated; high maintenance score; high quality score.

Warnings: low downloads; no esm support.

## Facts

| | |
|---|---|
| Version | 4.0.1 |
| Published | 2026-06-25 |
| First published | 2023-12-04 |
| Weekly downloads | 0 |
| License | Apache-2.0 |
| TypeScript types | bundled |
| Module format | CommonJS |
| Node | ^22.22.2 \|\| ^24.15.0 \|\| >=26.0.0 |
| Dependencies | 0 |
| Unpacked size | 90.4 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Provenance | attested (GitHub Actions) |
| GitHub stars | 181 |
| Author | bdehamer@github.com |
| Maintainers | bdehamer |

## Links

- npm: https://www.npmjs.com/package/@sigstore/core
- Repository: https://github.com/sigstore/sigstore-js
- Homepage: https://github.com/sigstore/sigstore-js/tree/main/packages/core#readme
- Issues: https://github.com/sigstore/sigstore-js/issues
- npm.io page: https://npm.io/package/@sigstore/core

## Recent versions

- 4.0.1 (latest) — 2026-06-25
- 4.0.0 — 2026-06-01
- 3.2.1 — 2026-05-22
- 3.2.0 — 2026-03-18
- 3.1.0 — 2025-12-19
- 3.0.0 — 2025-07-29
- 2.0.0 — 2024-10-14
- 1.1.0 — 2024-03-25
- 1.0.0 — 2024-02-08
- 0.2.0 — 2024-01-12
- 0.1.0 — 2023-12-04

## README

# @sigstore/core · [![npm version](https://img.shields.io/npm/v/@sigstore/core.svg?style=flat)](https://www.npmjs.com/package/@sigstore/core) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke Test Status](https://github.com/sigstore/sigstore-js/workflows/smoke-test/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)

Base library for [Sigstore][1] JavaScript packages.

## Prerequisites

- Node.js version ^22.22.2 || ^24.15.0 || >=26.0.0


[1]: https://www.sigstore.dev

---
_Source: https://npm.io/package/@sigstore/core · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._