The GitHub release contains a detached signature file for the NPM package (named mongodb-X.Y.Z.tgz.sig). The following command returns the link npm package. npm view mongodb@vX.Y.Z dist.tarball Using ...