root-signing
root-signing copied to clipboard
client tests do not cover npmjs delegation or artifact
We could add anything in the npmjs delegation and the current tests will be fine
this should obviously be done in staging first, maybe with https://github.com/sigstore/root-signing-staging/issues/155