Inspect a package

Fetches the artifact, parses its SLSA attestation, validates the certificate chain. No rebuild.

npm:sigstore@2.3.1npm:@sigstore/sign (latest)npm:left-pad@1.3.0 (unattested)