From 5ef8f3a185bdc98176b562db6f9cd57bf34bf9a0 Mon Sep 17 00:00:00 2001
From: boda <6238558+bodadotsh@users.noreply.github.com>
Date: Thu, 11 Dec 2025 00:29:11 +0000
Subject: [PATCH] Add 'trustedPublisher' and 'attestations' types

Got the types shape from packages like https://registry.npmjs.org/npm-package-arg
---
 types/index.d.ts | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/types/index.d.ts b/types/index.d.ts
index ac4432d..d484e5b 100644
--- a/types/index.d.ts
+++ b/types/index.d.ts
@@ -3,6 +3,10 @@ interface Contact {
   email?: string
   url?: string
   name: string
+  trustedPublisher?: {
+    id: string
+    oidcConfigId: string
+  } 
 }
 
 interface Signature {
@@ -84,6 +88,16 @@ interface Dist {
    * the unpacked size of the files in the tarball. >= 2018
    */
   unpackedSize?: number
+
+  /**
+  * https://docs.npmjs.com/generating-provenance-statements
+  */
+  attestations?: {
+    url: string
+    provenance: {
+      predicateType: string
+    }
+  }
 }
 
 interface DevEngineDependency {