Add an indicator for whether or not the module has an artifact attestation.

[pauliesnug]

Clear and concise description of the problem

I want the node_modules inspector to display (a little checkbox or otherwise), the verified artifact attestation if it exists which should be available in the npm API and also a link to the source code + build process linked to said attestation.

Suggested solution

We could just fetch the information from the npm api.

Alternative

No response

Additional context

No response

Validations

• Follow our Code of Conduct
• Read the Contributing Guide.
• Check that there isn't already an issue that request the same feature to avoid creating a duplicate.

[OrbisK]

looks like npm has npm audit signatures --json

{
  "invalid": [],
  "missing": []
}

But pnpm does not have pnpm audit signatures.

@pauliesnug is this the info you need?

This is not equivalent to

even if the "Built and signed on GitHub Actions" checkmark is missing its not listed under missing... 🤔

[SimYunSup]

@OrbisK This might be unrelated, but it would be great if a feature could be developed, based on npm audit, that shows security issues specifically.