npm · Schema

Distribution

Distribution metadata for a specific published version, including integrity hashes and tarball location.

PackagesJavaScriptNode.jsPackage ManagementRegistrySecurity

Properties

Name	Type	Description
shasum	string	The SHA-1 checksum of the tarball.
tarball	string	The URL where the tarball can be downloaded.
integrity	string	The Subresource Integrity (SRI) hash of the tarball, typically using SHA-512.
fileCount	integer	The number of files in the tarball.
unpackedSize	integer	The total unpacked size of the tarball in bytes.
signatures	array	Cryptographic signatures for the package version.

View JSON Schema on GitHub

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/Distribution",
  "title": "Distribution",
  "type": "object",
  "description": "Distribution metadata for a specific published version, including integrity hashes and tarball location.",
  "properties": {
    "shasum": {
      "type": "string",
      "description": "The SHA-1 checksum of the tarball."
    },
    "tarball": {
      "type": "string",
      "format": "uri",
      "description": "The URL where the tarball can be downloaded."
    },
    "integrity": {
      "type": "string",
      "description": "The Subresource Integrity (SRI) hash of the tarball, typically using SHA-512."
    },
    "fileCount": {
      "type": "integer",
      "description": "The number of files in the tarball."
    },
    "unpackedSize": {
      "type": "integer",
      "description": "The total unpacked size of the tarball in bytes."
    },
    "signatures": {
      "type": "array",
      "description": "Cryptographic signatures for the package version.",
      "items": {
        "type": "object",
        "properties": {
          "keyid": {
            "type": "string",
            "description": "The identifier of the signing key."
          },
          "sig": {
            "type": "string",
            "description": "The signature value."
          }
        }
      }
    }
  }
}