Verify the npm registry's pgp signature for a package version, one stop shopping edition. This tool requires that you have the Keybase command-line tool already installed.
Usage:
npx verify-npm-signature [email protected]
verify-npm-signature [email protected]
vns @slack/[email protected]
Note that many older packages don't have signatures yet, so the lack of a signature does not yet indicate anything is wrong.
ISC.