signet
signet is a tool for creating attestations about software packages.
This is a work in progress!
At the moment, when npm installed globally, a sig command is installed. Run it
to see the current set of features.
License
Apache 2.0. See LICENSE.txt.