---
id: sigstore-models
version: "0.0.6"
license: unclear
license_treatment: unclear
maintenance: active
---

# sigstore-models — Pydantic based models for Sigstore's protobuf specifications

License: unclear · Maintenance: active · Downloads: 787.2K/mo

## What it is and what it does

sigstore-models is a Pydantic-based library that defines data models for Sigstore's cryptographic and signing infrastructure. It mirrors a subset of Sigstore's protobuf specifications and focuses on providing type-safe, validated schemas that match Sigstore's JSON serialization format. The package is designed as a foundational layer for sigstore-python and other tools that need to work with Sigstore's data structures.

The library depends on Pydantic for validation and typing-extensions for compatibility, keeping the dependency footprint minimal. It explicitly does not support protobuf serialization—its scope is limited to mirroring protobuf-influenced types as Pydantic models. With active maintenance and recent commits, it is suitable for projects that need structured, validated representations of Sigstore data, though its Alpha status and young release history suggest it may still evolve.

Use it for:

- Validating and deserializing Sigstore JSON responses in Python applications that integrate with Sigstore services.
- Building type-safe wrappers around Sigstore APIs by using these models as base schemas.
- Providing structured data models for sigstore-python and related cryptographic signing tools.
- Ensuring JSON serialization compatibility with Sigstore's protobuf-influenced format in downstream libraries.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides Pydantic-based data models that mirror Sigstore's protobuf specifications for type-safe JSON serialization and deserialization.

Yes, if you are building on sigstore-python or need validated Pydantic models for Sigstore data. The low install friction, active maintenance, and lack of known vulnerabilities make it safe to adopt. However, verify the license before use in proprietary contexts, and be aware that the package is still in Alpha—expect potential API changes. If you only need Sigstore integration indirectly through sigstore-python, you may not need to install this directly.

## Install

pip install sigstore-models
uv add sigstore-models
poetry add sigstore-models

## Installing sigstore-models

Before you install: Low install friction with only two lightweight runtime dependencies (pydantic and typing-extensions). Active maintenance with recent commits, though the project is young (first release 2025-07-21) and marked as Alpha status.

License in practice: License treatment is unclear—no SPDX identifier or raw license text is available in the package metadata. Verify the actual license before use in proprietary or restricted contexts.

Quickstart:

pip install sigstore-models

from sigstore_models import /* model classes */
# Use Pydantic models for Sigstore data validation and JSON serialization

Requires Python 3.10 or later; depends on Pydantic 2 (per Framework classifier).

Verify before relying:

- Which specific Pydantic model classes are exported and available for import.
- Whether the package is intended for direct use or primarily as a dependency of sigstore-python.
- The actual license under which the package is distributed.

## Package facts

- License: not declared (unclear)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 787.2K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

sigstore pydantic models, sigstore data validation, sigstore json serialization, pydantic protobuf models, sigstore type-safe schemas, sigstore-python models, cryptographic signature models, pydantic-models, sigstore, cryptography

[View on SkillFed](https://skillfed.io/packages/sigstore-models) · [View on PyPI](https://pypi.org/project/sigstore-models/)