This packages originated from https://github.com/facebook/relay. It verifies automatically generated files and effectively prevents from manual pollution. Usage (simplified GraphQL schema snapshoting example):
// we can save a signed file
let new_snapshot = sign_file
// or verify its content
is_signed
is_valid_signature
It is also possible to re-sign file which is already signed (means update the signature when it already exists).