---
id: cursive
version: "0.3.0"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# cursive — Cursive implements OpenStack-specific validation of digital signatures.

License: permissive · Maintenance: active · Downloads: 101.2K/mo

## What it is and what it does

Cursive is a library that extracts and centralizes OpenStack-specific digital signature validation logic previously scattered across OpenStack projects. It wraps cryptography and Oslo libraries to provide signature verification tailored to OpenStack's security model and certificate handling practices.

The package is intended for OpenStack operators, integrators, and developers who need to verify signatures on OpenStack artifacts, configurations, or communications. It requires Python 3.11+ and depends on the Oslo middleware suite (serialization, utilities, internationalization, logging) plus castellan for key management. The project is actively maintained and has no known vulnerabilities.

Use it for:

- Verify digital signatures on OpenStack configuration files or deployment artifacts in CI/CD pipelines.
- Validate cryptographic signatures on OpenStack API responses or messages in custom integrations.
- Centralize signature validation logic across multiple OpenStack-based services or tools.
- Implement security controls for OpenStack cloud environments requiring signature attestation.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Cursive validates digital signatures using OpenStack-specific logic, providing cryptographic verification capabilities for OpenStack projects and integrations.

Yes, if you are building or operating OpenStack infrastructure and need standardized signature validation. The library is actively maintained, has low install friction, carries a permissive license, and integrates cleanly with the Oslo ecosystem. Not relevant for non-OpenStack projects.

## Install

pip install cursive
uv add cursive
poetry add cursive

## Installing cursive

Before you install: Low friction: pure Python wheel with no compiled dependencies. Active maintenance with a release 8 days ago. Depends on established OpenStack libraries (oslo.* suite) and cryptography, all well-maintained.

License in practice: Apache-2.0 permissive license allows commercial and private use with minimal restrictions; suitable for most deployment contexts.

Quickstart:

pip install cursive

from cursive import signature_utils
# Use signature_utils to validate OpenStack-specific signatures

Requires Python 3.11 or later; designed for OpenStack environments.

Verify before relying:

- What specific OpenStack signature formats or standards does cursive validate (e.g., certificate chains, key types)?
- Does cursive provide command-line tools or only a Python API?
- What is the scope of 'additional capabilities' mentioned as future work?

## Package facts

- License: Apache-2.0 (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 101.2K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

openstack signature verification, digital signature validation, cryptographic signature checking, openstack security validation, signature verification library, openstack, cryptography, signature-validation

[View on SkillFed](https://skillfed.io/packages/cursive) · [View on PyPI](https://pypi.org/project/cursive/)