EEXPIREDSIGNATUREKEY

Open jendrikw opened this issue 3 weeks ago • 1 comments

Rollup Plugin Name: @rollup/plugin-virtual
Rollup Plugin Version: 3.0.2
Rollup Version: 4.46.4
Operating System (or Browser): debian
Node Version: 20
Link to reproduction (⚠️ read below):

In any empty directory, execute npm i rollup @rollup/plugin-virtual && npm audit signatures

Expected Behavior

All signatures can be verified

Actual Behavior

npm ERR! code EEXPIREDSIGNATUREKEY
npm ERR! @rollup/[email protected] has a registry signature with keyid: SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA but the corresponding public key has expired 2025-01-29T00:00:00.000Z

Nov 25 '25 11:11 jendrikw

FYI this is not likely to be prioritized anytime soon.

Nov 25 '25 14:11 shellscape