What are the differences between and purposes of the NPM shasum, integrity, and signatures fields?
An example NPM package metadata JSON looks like this (with dist moved toward the top):
An example NPM package metadata JSON looks like this (with dist moved toward the top):