PyPI page
Home page
Author:
Stephen Toriola
License:
Apache License
Version 2.0, January 2004
https://www.apache.org/licenses/
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
1. Definitions....
Summary:
Safer package install and scan tool for PyPI, npm/yarn/pnpm, Cargo/crates.io, Go modules, Maven/Maven Central, NuGet/NuGet.org, Pub/pub.dev, RubyGems/rubygems.org, and Composer/Packagist, with cryptographic provenance checks (PyPI/npm/Maven/NuGet/Pub/RubyGems/Composer), CVE lookups, Docker + Trivy deep mode with behavioral tracing, and signed receipts
Latest version:
0.10.0
Required dependencies:
aiohttp
|
click
|
defusedxml
|
node-semver
|
packaging
|
pypi-attestations
|
pyyaml
|
requests
|
semver
|
sigstore
Optional dependencies:
build
|
jsonschema
|
pyinstaller
|
pytest
|
twine
Downloads last day:
18
Downloads last week:
83
Downloads last month:
129
7-day smoothing