{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography/2"}],"enrichment":{"capability":"Signs and verifies JSON objects using ED25519 cryptographic signatures, supporting multiple signers and key rotation.","skillfed_tags":["ed25519","json-signing","abandoned"],"use_cases":["Sign configuration or state objects in distributed systems where multiple parties need to verify authenticity.","Implement message signing in federation protocols or peer-to-peer systems using ED25519.","Add cryptographic proof-of-origin to JSON API responses or data exports.","Rotate signing keys without invalidating previously signed objects by supporting multiple key IDs per entity."],"what_it_does":"Signedjson is a library for cryptographically signing JSON objects using ED25519 signatures. It allows multiple entities to sign the same object, supports key rotation by permitting each entity to use multiple keys, and stores signatures in a standard format alongside optional unprotected metadata. The core workflow is to generate a signing key, sign a JSON object with an entity name, then verify the signature using the corresponding verification key.\n\nThe package depends on canonicaljson for deterministic JSON serialization, unpaddedbase64 for signature encoding, pynacl for cryptographic operations, and typing utilities. It is designed for scenarios where JSON data needs cryptographic authentication\u2014such as federation protocols, message signing, or tamper detection\u2014but it has been abandoned since 2022 with no active maintenance.","worth_installing":"No, not recommended for new projects. The package is abandoned (last release 2022-03-29) with no active maintenance, an unclear license, and unspecified Python version support. While it has low install friction and no known vulnerabilities, the lack of updates and missing license metadata create legal and maintenance risks. Consider a maintained alternative if you need JSON signing."},"id":"signedjson","links":{"html":"https://skillfed.io/packages/signedjson","md":"https://skillfed.io/packages/signedjson.md","pypi":"https://pypi.org/project/signedjson/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2022-03-29","license_spdx":null,"license_treatment":"unclear","name":"signedjson","python_support":"unspecified","summary":"Sign JSON with Ed25519 signatures"},"popularity":{"monthly_downloads":100886,"position":12969,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.1.4"}