Factual package intelligence from PyPI

supply-chain-rekor-monitor 4.1.0 package intelligence

This project can be used to verify inclusion of artifacts, whether a correct signature is present, or verify consistency in regards to the Rekor transparency logs.

pip install supply-chain-rekor-monitor

Current version
4.1.0
Python requirement
<4.0,>=3.9
License
Apache 2.0
Distribution type
Pure Python wheel
Release files
2 (1 wheels, 1 source)
Download size
117.9 KiB
Release history
2 releases with files
Median release cadence
0 days

supply-chain-rekor-monitor dependencies

PyPI declares 3 unique dependency rules for this release. Environment markers are shown when supplied by the project.

  1. requests <3.0.0,>=2.32.3
  2. cryptography <44.0.0,>=43.0.3
  3. jsonschema <5.0.0,>=4.23.0

Compatibility and release files

supply-chain-rekor-monitor publishes 1 wheel and 1 source archive for version 4.1.0. Wheel platform tags: any.

Declared Python classifiers: 3.10, 3.11, 3.12, 3.13, 3.9.

Metadata completeness

PyPI does not currently declare: project URL. PyDeps marks these fields as unknown instead of guessing values.

Release activity and sources

PyPI lists 2 releases with files. The first dated release is ; 2 releases fall within the 365 days preceding the latest dated release. The current release files were uploaded on . The preceding dated release was .

The project does not publish external project URLs in its PyPI metadata.