sigstore-models
Pydantic based models for Sigstore's protobuf specifications
Decision gist · record as of 2026-08-14
Yes, if you are building on sigstore-python or need validated Pydantic models for Sigstore data. The low install friction, active maintenance, and lack of known vulnerabilities make it safe to adopt. However, verify the license before use in proprietary contexts, and be aware that the package is still in Alpha—expect potential API changes. If you only need Sigstore integration indirectly through sigstore-python, you may not need to install this directly.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.10 or later; depends on Pydantic 2 (per Framework classifier).
- Low install friction with only two lightweight runtime dependencies (pydantic and typing-extensions).
- Active maintenance with recent commits, though the project is young (first release 2025-07-21) and marked as Alpha status.
License · maintenance · safety
(unclear) — License treatment is unclear—no SPDX identifier or raw license text is available in the package metadata. Verify the actual license before use in proprietary or restricted contexts.
last release 2025-11-26 (261 days) · last repo commit 2026-02-23 · 5 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 787,215 downloads/mo, #5,062 on PyPI
Alternatives
Verify before relying
pip install sigstore-models
from sigstore_models import /* model classes */
# Use Pydantic models for Sigstore data validation and JSON serialization- Which specific Pydantic model classes are exported and available for import.
- Whether the package is intended for direct use or primarily as a dependency of sigstore-python.
- The actual license under which the package is distributed.
What it is and what it does
sigstore-models is a Pydantic-based library that defines data models for Sigstore's cryptographic and signing infrastructure. It mirrors a subset of Sigstore's protobuf specifications and focuses on providing type-safe, validated schemas that match Sigstore's JSON serialization format. The package is designed as a foundational layer for sigstore-python and other tools that need to work with Sigstore's data structures.
The library depends on Pydantic for validation and typing-extensions for compatibility, keeping the dependency footprint minimal. It explicitly does not support protobuf serialization—its scope is limited to mirroring protobuf-influenced types as Pydantic models. With active maintenance and recent commits, it is suitable for projects that need structured, validated representations of Sigstore data, though its Alpha status and young release history suggest it may still evolve.
Use it for
- Validating and deserializing Sigstore JSON responses in Python applications that integrate with Sigstore services.
- Building type-safe wrappers around Sigstore APIs by using these models as base schemas.
- Providing structured data models for sigstore-python and related cryptographic signing tools.
- Ensuring JSON serialization compatibility with Sigstore's protobuf-influenced format in downstream libraries.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you are building on sigstore-python or need validated Pydantic models for Sigstore data.
The low install friction, active maintenance, and lack of known vulnerabilities make it safe to adopt. However, verify the license before use in proprietary contexts, and be aware that the package is still in Alpha—expect potential API changes. If you only need Sigstore integration indirectly through sigstore-python, you may not need to install this directly.
Install
sigstore-models on PyPI
Before you install
Low install friction with only two lightweight runtime dependencies (pydantic and typing-extensions). Active maintenance with recent commits, though the project is young (first release 2025-07-21) and marked as Alpha status.
Requires Python 3.10 or later; depends on Pydantic 2 (per Framework classifier).
License in practice
License treatment is unclear—no SPDX identifier or raw license text is available in the package metadata. Verify the actual license before use in proprietary or restricted contexts.
Quickstart
pip install sigstore-models
from sigstore_models import /* model classes */
# Use Pydantic models for Sigstore data validation and JSON serializationVerify before relying
- Which specific Pydantic model classes are exported and available for import.
- Whether the package is intended for direct use or primarily as a dependency of sigstore-python.
- The actual license under which the package is distributed.
Package facts
| License | Not declared unclear |
| Python support | Supports the current Python release >=3.10 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 2 packagespydantictyping-extensions |
| Maintenance | Actively maintained 261 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 787,215 / month, #5,062 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 3 - AlphaFramework :: Pydantic :: 2Intended Audience :: DevelopersProgramming Language :: Python :: 3Typing :: Typed |
Evidence: sigstore_models-0.0.6-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “sigstore pydantic models”
- sigstore-modelsProvides Pydantic-based data models that mirror Sigstore's protobuf…
- sigstore-rekor-typesProvides Python data models for Rekor's API types, enabling type-safe…
- sigstore-protobuf-specsProvides Python protobuf message definitions and serialization code…
Give your agent the search over MCP, or paste the wish link into any chat.
More Cryptography packages
Certifi provides Mozilla's curated collection of root SSL certificates for Python applications to validate TLS hosts and verify certificate trustworthiness.
cryptography provides cryptographic recipes and low-level primitives for symmetric encryption, message digests, key derivation, and other common cryptographic algorithms in Python.
Pure-Python RSA encryption, decryption, signing, and key generation following PKCS#1 v1.5, with command-line and library interfaces.
pyOpenSSL wraps OpenSSL's SSL/TLS functionality for Python, providing high-level connection objects and certificate handling through a Python-friendly interface around OpenSSL's cryptographic operations.
Provides Microsoft Entra ID token-based authentication for Azure SDK clients through a set of TokenCredential implementations that handle OAuth flows and managed identity support.
PyNaCl provides Python bindings to libsodium for digital signatures, secret-key and public-key encryption, hashing, message authentication, and password-based key derivation.
See also sigstore-protobuf-specs · sigstore-rekor-types · pydantic-geojson · sigstore · airbyte-connector-models · jsonschema-pydantic · pydantic-zarr · django-pydantic-field · pydantic-scim · airbyte-protocol-models-dataclasses