* [sigstore framework v1.10.8](https://github.com/sigstore/sigstore) – Common code library shared by Sigstore infrastructure and Go clients providing signing interfaces and OpenID Connect support. * [go-tuf/v2 v2.4.2](https://github.com/theupdateframework/go-tuf) – Lightweight Go library for creating, signing, verifying, and managing secure software update metadata. * [sigstore-js @sigstore/mock@0.13....](https://github.com/sigstore/sigstore-js) – JavaScript libraries for interacting with Sigstore signing and verification services.