# @sigstore/verify

> Verification of Sigstore signatures

Latest version **4.1.2** (published 2026-08-04) · Apache-2.0 license · 0 weekly downloads

## Install

```sh
npm install @sigstore/verify
pnpm add @sigstore/verify
yarn add @sigstore/verify
bun add @sigstore/verify
```

## Health

**Score 70/100 (B)** — status: active.

Positive: has types; no vulnerabilities; has provenance; recently updated; high maintenance score; high quality score.

Warnings: low downloads; no esm support.

## Facts

| | |
|---|---|
| Version | 4.1.2 |
| Published | 2026-08-04 |
| First published | 2024-01-12 |
| Weekly downloads | 0 |
| License | Apache-2.0 |
| TypeScript types | bundled |
| Module format | CommonJS |
| Node | ^22.22.2 \|\| ^24.15.0 \|\| >=26.0.0 |
| Dependencies | 3 |
| Unpacked size | 82 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Provenance | attested (GitHub Actions) |
| GitHub stars | 182 |
| Author | bdehamer@github.com |
| Maintainers | bdehamer |

## Links

- npm: https://www.npmjs.com/package/@sigstore/verify
- Repository: https://github.com/sigstore/sigstore-js
- Homepage: https://github.com/sigstore/sigstore-js/tree/main/packages/verify#readme
- Issues: https://github.com/sigstore/sigstore-js/issues
- npm.io page: https://npm.io/package/@sigstore/verify

## Dependencies (3)

- [@sigstore/core](https://npm.io/package/@sigstore/core.md) ^4.0.1
- [@sigstore/bundle](https://npm.io/package/@sigstore/bundle.md) ^5.0.0
- [@sigstore/protobuf-specs](https://npm.io/package/@sigstore/protobuf-specs.md) ^0.5.0

## Recent versions

- 4.1.2 (latest) — 2026-08-04
- 4.1.1 — 2026-08-04
- 4.1.0 — 2026-06-25
- 4.0.0 — 2026-06-01
- 3.1.1 — 2026-05-22
- 3.1.0 — 2025-12-19
- 3.0.0 — 2025-07-29
- 2.1.1 — 2025-04-25
- 2.1.0 — 2025-02-04
- 2.0.0 — 2024-10-14
- 1.2.1 — 2024-05-16
- 1.2.0 — 2024-04-04
- 1.1.1 — 2024-03-25
- 1.1.0 — 2024-02-15
- 1.0.0 — 2024-02-08
- … 1 more at https://npm.io/package/@sigstore/verify/versions

## README

# @sigstore/verify · [![npm version](https://img.shields.io/npm/v/@sigstore/verify.svg?style=flat)](https://www.npmjs.com/package/@sigstore/verify) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke Test Status](https://github.com/sigstore/sigstore-js/workflows/smoke-test/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)

A library for verifying [Sigstore][1] signatures.

## Prerequisites

- Node.js version ^22.22.2 || ^24.15.0 || >=26.0.0

[1]: https://www.sigstore.dev

---
_Source: https://npm.io/package/@sigstore/verify · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._