@sigstore/mock is a lightweight utility for simulating the Sigstore signing flow during development and testing. It provides mock implementations of Sigstore components, allowing developers to test interactions with Sigstore without relying on a live Sigstore instance. This package simplifies integration testing, enabling faster and more reliable verification of applications that utilize Sigstore for signing and verification processes. It greatly reduces the setup overhead and complexity of working with Sigstore within local environments.
The @sigstore/mock npm package saw frequent releases between June 2023 and July 2024, with several months having multiple versions. Release activity significantly slowed down after July 2024, with only a few releases in late 2024 and the first half of 2025. The most recent release was version 0.11.0 in July 2025.
@sigstore/mock downloads show fluctuating trends. 2024 saw peaks in April, May, November and December. 2025 began similarly, but June experienced a surge. July saw a drop compared to June and August (partial month) shows a further decrease, suggesting a potential shift in usage.