Is @sigstore/protobuf-specs safe to use?

@sigstore/protobuf-specs has no known vulnerabilities on the latest version (0.5.1). DepScope rates its health at 61/100 (moderate risk).

What is the latest version of @sigstore/protobuf-specs?

The latest version of @sigstore/protobuf-specs is 0.5.1, released 2026-04-06.

Does @sigstore/protobuf-specs have known vulnerabilities?

No known vulnerabilities on the latest version of @sigstore/protobuf-specs.

Is @sigstore/protobuf-specs deprecated?

No, @sigstore/protobuf-specs is actively maintained. Latest release: 0.5.1 (2026-04-06).

What are alternatives to @sigstore/protobuf-specs?

Popular alternatives to @sigstore/protobuf-specs in npm include: semver, debug, ms, lru-cache, ansi-regex.

What license does @sigstore/protobuf-specs use?

@sigstore/protobuf-specs is licensed under Apache-2.0.

@sigstore/protobuf-specs

npmv0.5.1

code-signing for npm packages

License Apache-2.0permissive14 versions1 maintainers0 deps

sigstore/protobuf-specs

/ 100

Health

safe to use

@sigstore/[email protected] is safe to use (health: 61/100)

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

29.3 KBminified

5.9 KB gzipped

0 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@sigstore/protobuf-specs