sigstore-models

What it is and what it does

sigstore-models is a Pydantic-based library that defines data models for Sigstore's cryptographic and signing infrastructure. It mirrors a subset of Sigstore's protobuf specifications and focuses on providing type-safe, validated schemas that match Sigstore's JSON serialization format. The package is designed as a foundational layer for sigstore-python and other tools that need to work with Sigstore's data structures.

The library depends on Pydantic for validation and typing-extensions for compatibility, keeping the dependency footprint minimal. It explicitly does not support protobuf serialization—its scope is limited to mirroring protobuf-influenced types as Pydantic models. With active maintenance and recent commits, it is suitable for projects that need structured, validated representations of Sigstore data, though its Alpha status and young release history suggest it may still evolve.

Use it for:

• Validating and deserializing Sigstore JSON responses in Python applications that integrate with Sigstore services.
• Building type-safe wrappers around Sigstore APIs by using these models as base schemas.
• Providing structured data models for sigstore-python and related cryptographic signing tools.
• Ensuring JSON serialization compatibility with Sigstore's protobuf-influenced format in downstream libraries.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Provides Pydantic-based data models that mirror Sigstore's protobuf specifications for type-safe JSON serialization and deserialization.

Yes, if you are building on sigstore-python or need validated Pydantic models for Sigstore data. The low install friction, active maintenance, and lack of known vulnerabilities make it safe to adopt. However, verify the license before use in proprietary contexts, and be aware that the package is still in Alpha—expect potential API changes. If you only need Sigstore integration indirectly through sigstore-python, you may not need to install this directly.

Install

sigstore-models on PyPI

pip install sigstore-models

uv add sigstore-models

poetry add sigstore-models

Installing sigstore-models

Before you install

Low install friction with only two lightweight runtime dependencies (pydantic and typing-extensions). Active maintenance with recent commits, though the project is young (first release 2025-07-21) and marked as Alpha status.

License in practice

License treatment is unclear—no SPDX identifier or raw license text is available in the package metadata. Verify the actual license before use in proprietary or restricted contexts.

Quickstart

pip install sigstore-models

from sigstore_models import /* model classes */
# Use Pydantic models for Sigstore data validation and JSON serialization

Requires Python 3.10 or later; depends on Pydantic 2 (per Framework classifier).

Verify before relying

• Which specific Pydantic model classes are exported and available for import.
• Whether the package is intended for direct use or primarily as a dependency of sigstore-python.
• The actual license under which the package is distributed.

Package facts

Evidence: sigstore_models-0.0.6-py3-none-any.whl

Tags

More Cryptography packages