/**
 * @file Package provenance and attestation verification utilities.
 */
import type { ProvenanceOptions } from './types';
/**
 * Fetch package provenance information from npm registry.
 *
 * @example
 *   ;```typescript
 *   const provenance = await fetchPackageProvenance('lodash', '4.17.21')
 *   ```
 */
export declare function fetchPackageProvenance(pkgName: string, pkgVersion: string, options?: ProvenanceOptions): Promise<unknown>;
/**
 * Find the first attestation with valid provenance data.
 */
export declare function findProvenance(attestations: unknown[]): unknown;
/**
 * Extract and filter SLSA provenance attestations from attestation data.
 */
export declare function getAttestations(attestationData: unknown): unknown[];
export declare function getFetcher(): import("../external/make-fetch-happen").MakeFetchHappen;
/**
 * Convert raw attestation data to user-friendly provenance details.
 *
 * @example
 *   ;```typescript
 *   const details = getProvenanceDetails(attestationData)
 *   // { level: 'trusted', repository: '...', commitSha: '...' }
 *   ```
 */
export declare function getProvenanceDetails(attestationData: unknown): unknown;
/**
 * Check if a value indicates a trusted publisher (GitHub or GitLab).
 */
export declare function isTrustedPublisher(value: unknown): boolean;
