signet signet is a tool for creating attestations about software packages. This is a work in progress! At the moment, when npm installed globally, a sig command is installed. Run it to see the current set of features. License Apache 2.0. See LICENSE.txt.