# tuf-js

> JavaScript implementation of The Update Framework (TUF)

Latest version **6.0.0** (published 2026-06-01) · MIT license · 0 weekly downloads

## Install

```sh
npm install tuf-js
pnpm add tuf-js
yarn add tuf-js
bun add tuf-js
```

## Health

**Score 65/100 (B)** — status: active.

Positive: has types; no vulnerabilities; has provenance; high maintenance score; high quality score.

Warnings: low downloads; no esm support.

## Facts

| | |
|---|---|
| Version | 6.0.0 |
| Published | 2026-06-01 |
| First published | 2022-12-01 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | bundled |
| Module format | CommonJS |
| Node | ^22.22.2 \|\| ^24.15.0 \|\| >=26.0.0 |
| Dependencies | 3 |
| Unpacked size | 43.2 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Provenance | attested (GitHub Actions) |
| GitHub stars | 83 |
| Author | bdehamer@github.com |
| Maintainers | bdehamer, eugenethehub |
| Keywords | tuf, security, update |

## Links

- npm: https://www.npmjs.com/package/tuf-js
- Repository: https://github.com/theupdateframework/tuf-js
- Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme
- Issues: https://github.com/theupdateframework/tuf-js/issues
- npm.io page: https://npm.io/package/tuf-js

## Dependencies (3)

- [debug](https://npm.io/package/debug.md) ^4.4.3
- [@tufjs/models](https://npm.io/package/@tufjs/models.md) 5.0.0
- [@gar/promise-retry](https://npm.io/package/@gar/promise-retry.md) ^1.0.3

## Recent versions

- 6.0.0 (latest) — 2026-06-01
- 5.0.1 — 2026-04-09
- 4.1.0 — 2025-12-18
- 4.0.0 — 2025-07-25
- 3.1.0 — 2025-07-02
- 3.0.1 — 2024-10-14
- 3.0.0 — 2024-10-09
- 2.2.1 — 2024-05-06
- 2.2.0 — 2024-01-10
- 2.1.0 — 2023-08-24
- 2.0.0 — 2023-08-17
- 1.1.7 — 2023-06-12
- 1.1.6 — 2023-05-10
- 1.1.5 — 2023-05-03
- 1.1.4 — 2023-04-18
- … 12 more at https://npm.io/package/tuf-js/versions

## README

# tuf-js

JavaScript TUF client implementation.

---
_Source: https://npm.io/package/tuf-js · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._