Data verified May 2026
ADYour product here. Reach security decision-makers.Launch a campaignpkgsign Description
pkgsign is a CLI tool for signing and verifying npm and yarn packages. It allows for signing packages with PGP private keys or keybase.io for simplicity. Recently, several packages went missing from the npm registry, highlighting the importance of package signing to prevent unauthorized modifications and ensure trust in package sources.
pkgsign FAQ
Common questions about pkgsign including features, pricing, alternatives, and user reviews.
pkgsign is A CLI tool for signing and verifying npm and yarn packages. It is a Application Security solution designed to help security teams with NPM, Package Security, Supply Chain Security.
pkgsign is a free Application Security tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/RedpointGames/pkgsign/ for download and installation instructions.
Popular alternatives to pkgsign include:
1.Aikido Software Supply Chain Security - Software supply chain security platform detecting malware in dependencies (Commercial)
2.Chainguard Libraries - Malware-resistant software libraries rebuilt from source for multiple languages (Commercial)
3.Socket - Detects and blocks malicious/vulnerable open source packages in supply chains. (Commercial)
4.npm-zoo - npm-zoo is a curated database of known malicious NPM packages that helps developers and security researchers identify and avoid potentially harmful dependencies in their projects. (Free)
5.Veracode Secure Your Software Supply Chain - Software supply chain security platform with SCA, package firewall & threat intel (Commercial)
Compare these tools and more at https://cybersectools.com/categories/application-security
pkgsign is for security teams and organizations that need NPM, Package Security, Supply Chain Security. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Application Security tools can be found at https://cybersectools.com/categories/application-security
Have more questions? Browse our categories or search for specific tools.
