open-index/open-npm huggingface dataset:
npm package: @sigstore/bundle
Description: Sigstore bundle type
Author: bdehamer@github.com
Latest version: 4.0.0

# @sigstore/bundle &middot; [![npm version](https://img.shields.io/npm/v/@sigstore/bundle.svg?style=flat)](https://www.npmjs.com/package/@sigstore/bundle) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke Test Status](https://github.com/sigstore/sigstore-js/workflows/smoke-test/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)

A JavaScript library for working with the Sigstore bundle format.

## Features

- TypeScript types for the different Sigstore bundle versions.
- Bundle validation functions.
- Support for serializing/deserializing bundles to/from JSON.

## Prerequisites

- Node.js version ^20.17.0 || >=22.9.0

## Installation

```
npm install @sigstore/bundle
```
npm package: @sigstore/core
Description: Base library for Sigstore
Author: bdehamer@github.com
Latest version: 3.2.0

# @sigstore/core &middot; [![npm version](https://img.shields.io/npm/v/@sigstore/core.svg?style=flat)](https://www.npmjs.com/package/@sigstore/core) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke Test Status](https://github.com/sigstore/sigstore-js/workflows/smoke-test/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)

Base library for [Sigstore][1] JavaScript packages.

## Prerequisites

- Node.js version ^20.17.0 || >=22.9.0


[1]: https://www.sigstore.dev
npm package: @sigstore/oci
Description: OCI artifact support
Author: bdehamer@github.com
Latest version: 0.6.1

# @sigstore/oci &middot; [![npm version](https://img.shields.io/npm/v/@sigstore/oci.svg?style=flat)](https://www.npmjs.com/package/@sigstore/oci) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke Test Status](https://github.com/sigstore/sigstore-js/workflows/smoke-test/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)

Attach artifacts to images in OCI registries.

## Prerequisites

- Node.js version ^20.17.0 || >=22.9.0

## Installation

```
npm install @sigstore/oci
```

## Usage

```javascript
const { attachArtifactToImage } = require('@sigstore/oci');
```

```javascript
import { attachArtifactToImage } from '@sigstore/oci';
```

### attachArtifactToImage(options)

Uploads the provided artifact to the registry and associates it with an OCI image.

- `options` `Object`

  - `artifact` `Buffer`: Bytes of the artifact to upload.
  - `mediaType` `string`: Content type to assign to the artifact.
  - `imageName` `string`: Fully-qualified name of the image to which the artifact should be associated.
  - `imageDigest` `string`: Digest of the image to which the artifact should be associated. Should be of the form `<alg>:<digest>`.
  - `credentials` `Object`
    - `username` `string`: Username to use when authenticating with the registry.
    - `password` `string`: Password to use when authenticating with the registry.
  - `annotations` `Record<string, string>`: Arbitrary name/value pairs to be associated with artifact.

### getRegistryCredentials(imageName)

Reads the local `$HOME/.docker/config.json` file and returns the credentials associated with the image's registry.

- `imageName` `string`: Fully-qualified name of the image from which to extract the registry hostname.

Returns a `Credentials` object with the following keys:

- `username` `string`
- `password` `string`

Throws if the Docker config cannot be located or if there are no credentials for the specified registry.
npm package: @sigstore/rekor-types
Description: Sigstore Rekor types
Author: bdehamer@github.com
Latest version: 4.0.0

# @sigstore/rekor-types

TypeScript types for the Sigstore [Rekor][1] REST API.

## Updating Rekor Types

Update the git `REF` in `hack/generate-rekor-types` from the [sigstore/rekor][1] repository.

Generate TypeScript types (should update files in scr/\_\_generated\_\_):

```
npm run codegen
```

[1]: https://github.com/sigstore/rekor
npm package: @sigstore/verify
Description: Verification of Sigstore signatures
Author: bdehamer@github.com
Latest version: 3.1.0

# @sigstore/verify &middot; [![npm version](https://img.shields.io/npm/v/@sigstore/verify.svg?style=flat)](https://www.npmjs.com/package/@sigstore/verify) [![CI Status](https://github.com/sigstore/sigstore-js/workflows/CI/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/ci.yml) [![Smoke Test Status](https://github.com/sigstore/sigstore-js/workflows/smoke-test/badge.svg)](https://github.com/sigstore/sigstore-js/actions/workflows/smoke-test.yml)

A library for verifying [Sigstore][1] signatures.

## Prerequisites

- Node.js version ^20.17.0 || >=22.9.0

[1]: https://www.sigstore.dev