In July 2022 the public npm registry migrated away from the existing PGP signatures to a new ECDSA signatures for signature verification.
As of May 2nd 2023, npm packages are no longer signed with PGP based registry signatures. The public key hosted on Keybase will expire.
Read more about registry signatures.
The post npm packages are no longer signed with PGP signatures appeared first on The GitHub Blog.
