Update content/packages-and-modules/securing-your-code/verifying-the-pgp-signature-for-a-package-from-the-npm-public-registry.mdx
Co-authored-by: Gar <gar+gh@danger.computer>
Luke Karrys committed
Feb 25, 2022 at 23:44 UTC
6860f06ae390857c6d4fab668e2f69820c08611b
1 file changed
+1
-1
content/packages-and-modules/securing-your-code/verifying-the-pgp-signature-for-a-package-from-the-npm-public-registry.mdx
+1
-1
@@ -28,7 +28,7 @@ To ensure the integrity of a package version you download from the npm public re
28
1. On the command line, fetch the signature for the package version you want and save it in a file:
29
30
```
31
- npm view light-cycle@1.4.3 --json | npm exec json ".dist.npm-signature" > sig-to-check
31
+ npm view light-cycle@1.4.3 dist.npm-signature > sig-to-check
32
```
33
34
2. Get the integrity field for that version (example below includes response):