lurq

npm package

Home

sigstore

Sigstore is a JavaScript library designed for generating and verifying Sigstore signatures, primarily for npm packages. It is useful for ensuring the integrity and authenticity of files through signature verification and is compatible with OpenID Connect identities.

lurq health score
80/100
Confidence
proven
Weekly downloads
11,416,358
Latest version
5.0.0
Last release
Aug 4, 2026
License
Apache-2.0

Should you depend on sigstore?

lurq's verdict: low

  • No known advisories

Check this from your coding agent

This page is a daily snapshot. lurq's verify tool checks sigstore at the exact version your agent is about to install, and compat checks it against the rest of your stack. One command connects Claude Code, Cursor, VS Code and other agents:

npx lurqrun

Free to start. Quickstart

Other styling packages lurq scores

Scored from public signals (npm registry, GitHub, deps.dev and advisory databases). Data as of Sep 4, 2026; this page refreshes every 24 hours. Source repository.