sigstore (npm): code-signing for npm packages
Keywords: codesigning|javascript|node|security|supply-chain