@stman For #nodejs signed packages were last discussed like in 2018 https://medium.com/@hq/introducing-pkgsign-package-signing-and-verification-for-npm-5b833e0ec2d4