corepack/sources
Thomas Scholtes aa1b84939a
Get NPM signing keys from @sigstore/tuf
Instead of hardcoding NPM signing keys for verification we get them from
sigstore’s TUF repository. This is in line with how npm implements
signature verification.

Fixes #616, fixes #612
2025-04-04 17:58:23 +02:00
..
commands feat: add limited support for `devEngines` (#643) 2025-02-28 20:06:33 +01:00
Engine.ts fix(use): do not throw on invalid `packageManager` (#663) 2025-02-28 19:20:09 +01:00
_cli.ts
_lib.ts
corepackUtils.ts Get NPM signing keys from @sigstore/tuf 2025-04-04 17:58:23 +02:00
debugUtils.ts
folderUtils.ts
httpUtils.ts Get NPM signing keys from @sigstore/tuf 2025-04-04 17:58:23 +02:00
main.ts chore: fix lint warning (#657) 2025-02-14 23:20:20 +01:00
nodeUtils.ts
npmRegistryUtils.ts Get NPM signing keys from @sigstore/tuf 2025-04-04 17:58:23 +02:00
semverUtils.ts fix: selectively import required semver functions (#511) 2024-07-12 10:47:18 +02:00
specUtils.ts chore(deps): update eslint to 9.22.0 (#676) 2025-03-26 20:26:06 +01:00
types.ts chore(deps): update eslint to 9.22.0 (#676) 2025-03-26 20:26:06 +01:00