This is a node module implementation of the signed tar specifications.

The normal way:

npm install signed-tar

You must have gpg installed and on the PATH. (Comes pre-installed on Mac.)

Inside some module, use it like:

var sigtar = require('signed-tar')
var options = {
	user: '<john.doe@email.com>',
	dir: './test/package'
}
sigtar(options, function(err) {
	console.log('done signing and tarring')
})

A valid PGP/GPG username. The more specificity, the better.

The GPG man page lists a few possibilities.

The directory to generate a manifest for and tar.

VOL