{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/3"},{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography/2"}],"enrichment":{"capability":"Provides Python protobuf message definitions and serialization code for Sigstore cryptographic signing and verification workflows.","skillfed_tags":["sigstore","protobuf","supply-chain-security"],"use_cases":["Building Sigstore client libraries that need to serialize and deserialize signing requests and verification responses.","Integrating artifact signing workflows into CI/CD pipelines that use Sigstore for supply-chain security.","Implementing custom verification logic for Sigstore-signed artifacts in Python applications.","Developing tools that interact with Sigstore services like Rekor (transparency log) or Fulcio (certificate authority)."],"what_it_does":"This package contains compiled Python protobuf message definitions for Sigstore, the open-source project for cryptographic artifact signing and verification. It provides the serialization and deserialization code needed to work with Sigstore's standard message formats, including support for cryptographic keys, signatures, and verification material. The package is built from `.proto` specifications and includes generated Python stubs using betterproto and pydantic for validation.\n\nIt is primarily a dependency for tools and libraries that integrate with the Sigstore ecosystem\u2014such as clients that need to communicate with Sigstore services (Fulcio, Rekor) or applications that verify signed artifacts. The package supports modern Python versions (3.7 through 3.11) and is actively maintained by the Sigstore community, with ongoing work to support new post-quantum cryptography algorithms.","worth_installing":"Yes, if you are building or integrating with Sigstore tooling. This is a foundational dependency for any Python application that needs to work with Sigstore's message formats. Install friction is minimal and maintenance is active. No security vulnerabilities are known. If you are not working with Sigstore directly, you likely do not need this package."},"id":"sigstore-protobuf-specs","links":{"html":"https://skillfed.io/packages/sigstore-protobuf-specs","md":"https://skillfed.io/packages/sigstore-protobuf-specs.md","pypi":"https://pypi.org/project/sigstore-protobuf-specs/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-04-06","license_spdx":null,"license_treatment":"permissive","name":"sigstore-protobuf-specs","python_support":"supports_current","summary":"A library for serializing and deserializing Sigstore messages"},"popularity":{"monthly_downloads":104175,"position":12764,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.5.1"}