{"categories":[{"label":"Software Development","url":"https://skillfed.io/packages/category/software-development/3"},{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/5"}],"enrichment":{"capability":"SignXML implements W3C XML Signature (XMLDSig) standard for signing and verifying XML documents, with support for SAML 2.0, XAdES, EBICS, and WS-Security protocols.","skillfed_tags":["xml-security","saml","digital-signatures"],"use_cases":["Verify SAML 2.0 assertions from identity providers by extracting and validating X.509 certificates from SAML metadata.","Sign and verify XAdES digital signatures for long-term archival and legal compliance in document workflows.","Validate XML signatures in EBICS banking protocols to ensure message authenticity and non-repudiation.","Establish trust in XML-based web services by verifying WS-Security signatures with certificate chain validation.","Prevent SAML signature-wrapping attacks by configuring expected signature location and verifying only the returned signed_xml data."],"what_it_does":"SignXML is a Python implementation of the W3C XML Signature standard, used to cryptographically sign and verify XML documents in enterprise protocols like SAML 2.0, XAdES, EBICS, and WS-Security. It wraps lxml and cryptography to provide both standard XMLDSig operations and extensions for X.509 certificate chain validation, hostname/CN verification, and XAdES support.\n\nThe library is designed with security-first defaults: it uses a libxml2-based parser hardened against common XML attacks, disables network calls and unsafe transforms by default, and emphasizes the \"see what is signed\" principle to prevent signature-wrapping attacks. It supports exclusive XML canonicalization with inclusive prefixes, certificate validity checks at a specific point in time, and flexible trust establishment via pre-shared certificates, CA files, or subject name matching.","worth_installing":"Yes. SignXML is actively maintained, has no known vulnerabilities, low install friction, and implements a critical security standard for enterprise XML protocols. It is appropriate for production use in SAML, XAdES, EBICS, and WS-Security integrations where XML signature verification is required."},"id":"signxml","links":{"html":"https://skillfed.io/packages/signxml","md":"https://skillfed.io/packages/signxml.md","pypi":"https://pypi.org/project/signxml/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-05","license_spdx":null,"license_treatment":"permissive","name":"signxml","python_support":"supports_current","summary":"Python XML Signature and XAdES library"},"popularity":{"monthly_downloads":3188123,"position":2707,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"5.1.0"}