Package profile
sigstore
- Summary: A tool for signing Python package distributions
- Author: Sigstore Authors <sigstore-dev@googlegroups.com>
- License: Apache Software License
- Homepage: https://pypi.org/project/sigstore/
- Documentation: https://sigstore.github.io/sigstore-python/
- Source: https://github.com/sigstore/sigstore-python
- Number of releases: 66
- First release: 0.0.1rc1 on 2022-04-28
- Latest release: 4.5.0 on 2026-07-28
- Latest release size: 109.1 KB (pure Python wheel)
2 known vulnerabilitiesLatest: GHSA-hm8f-75xx-w2vr — sigstore CSRF possibility in OIDC authentication during signing View all →