EEXPIREDSIGNATUREKEY

[jendrikw]

• Rollup Plugin Name: @rollup/plugin-virtual
• Rollup Plugin Version: 3.0.2
• Rollup Version: 4.46.4
• Operating System (or Browser): debian
• Node Version: 20
• Link to reproduction (⚠️ read below):

In any empty directory, execute npm i rollup @rollup/plugin-virtual && npm audit signatures

Expected Behavior

All signatures can be verified

Actual Behavior

npm ERR! code EEXPIREDSIGNATUREKEY
npm ERR! @rollup/plugin-virtual@3.0.2 has a registry signature with keyid: SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA but the corresponding public key has expired 2025-01-29T00:00:00.000Z

[shellscape]

FYI this is not likely to be prioritized anytime soon.