@sigstore/tuf
npmIs @sigstore/tuf safe to use?
Based on the latest brin safety scan, no vulnerabilities or threats were detected for @sigstore/tuf v4.0.1. Trust score: 65/100. No known CVE vulnerabilities, no detected threat patterns, and no suspicious capabilities identified. This is an automated, point-in-time assessment.
Install (safety-checked)
@sigstore/tuf Passed Security Checks
No security concerns detected
0
0
0
No Concerns Detected
No security concerns detected in the latest brin assessment. This is an automated, point-in-time evaluation — security posture may change.
This is an automated, point-in-time assessment and may contain errors. Findings are risk indicators, not confirmed threats. Security posture may change over time. Maintainers can dispute findings via the brin review process.
@sigstore/tuf Capabilities & Permissions
What @sigstore/tuf can access when installed. Review these capabilities before using with AI agents like Cursor, Claude Code, or Codex.
Environment Variables
Accesses the following environment variables.
AGENTS.md for @sigstore/tuf
Good instructions lead to good results. brin adds @sigstore/tuf documentation to your AGENTS.md so your agent knows how to use it properly—improving both safety and performance.
brin initVercel's research: 100% accuracy with AGENTS.md vs 53% without →
@sigstore/tuf Documentation & Source Code
For the full @sigstore/tuf README, API documentation, and source code, visit the official package registry.
Frequently asked questions about @sigstore/tuf safety
Install (safety-checked)
Weekly Downloads
Version
4.0.1License
Apache-2.0Last Scanned
Trust Score
Capabilities
Accesses: LOCALAPPDATA, XDG_DATA_HOME