{"library":"sigstore","type":"library","category":null,"description":"Sigstore-python is a client library for interacting with the Sigstore ecosystem, providing tools for signing and verifying Python package distributions and other artifacts. It is actively maintained, with frequent releases addressing security fixes, new features, and compatibility updates. The current version is 4.2.0.","language":"python","status":"active","version":"4.2.0","tags":["security","supply chain","signing","verification","pypi","trust"],"install":[{"cmd":"pip install sigstore","imports":["from sigstore.sign import Signer","from sigstore.verify import verify_artifact","from sigstore.trust_root import TrustRoot","from sigstore.oidc import IdentityProvider"]},{"cmd":"pip install \"sigstore>=3.10,<4\"","imports":[]}],"homepage":"https://pypi.org/project/sigstore/","github":"https://github.com/sigstore/sigstore-python","docs":"https://sigstore.github.io/sigstore-python/","changelog":null,"pypi":"https://pypi.org/project/sigstore/","npm":null,"openapi_spec":null,"status_page":null,"smithery":null,"compatibility":{"summary":{"python_range":"3.10–3.9","success_rate":50,"avg_install_s":7,"avg_import_s":1.59,"wheel_type":"wheel"},"url":"https://checklist.day/v1/registry/sigstore/compatibility"},"provenance":{"verified_status":"passing","verified_at":"Sun Jun 28","last_verified":"Sun Jun 28","next_check":"Tue Jul 28","install_tag":null}}