npm audit signatures

Named by 3 kept items in this workspace.

Search every workspace for npm audit signatures. It matches the name as written, so it can find other things that share it.

The items that name it 3

Package managers have an integrity problem
writeup2026-10-14It is written here as npm audit signatures: validates registry public keys with Sigstore and checks signatures of installed packages.
Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier
writeup2026-06-18
Registry provenance/attestation verification command; would reject unattested (provenance: no) malicious package versions like the Mastra wave
CVE Lite CLI
repo2026-05-31
Verifies ECDSA signatures on CVE Lite CLI packages published to the npm registry.

All technologies in this workspace.