PyPI page
Home page
License:
Apache-2.0
Summary:
Shared signed-receipt library for SZL components — DSSE/ECDSA-P256-SHA256 signing on maintained libraries (verified against in-toto-attestation 0.9.3 + cryptography 50.0.1; cosign-compatible, UNSIGNED-honest fallback) plus in-toto/SLSA-shaped attestation and EU AI Act / NIST AI RMF compliance-evidence mapping.
Latest version:
0.3.3
Required dependencies:
cryptography
|
in-toto-attestation
Optional dependencies:
pytest
Downloads last day:
8
Downloads last week:
17
Downloads last month:
410
7-day smoothing