Data

Tools

Indexes

Applications

Experiments

Summary

An open API service for producing an overview of a list of open source projects.

https://github.com/sigstore/sigstore-python

codesigning python security supply-chain

Score: 23.574827376038293

Last synced: about 9 hours ago
JSON representation

Repository metadata:

A Sigstore client written in Python

Owner metadata:

GitHub Events

Total
Last Year

Committers metadata

Last synced: 5 days ago

Total Commits: 1,309
Total Committers: 43
Avg Commits per committer: 30.442
Development Distribution Score (DDS): 0.446

Commits in past year: 256
Committers in past year: 16
Avg Commits per committer in past year: 16.0
Development Distribution Score (DDS) in past year: 0.234

Name Email Commits
dependabot[bot] 4****] 725
William Woodruff w****m@t****m 255
Jussi Kukkonen j****n@g****m 74
Alex Cameron a****c@t****h 64
Dustin Ingram d****i 48
Andrew Pan 3****n 20
github-actions[bot] 4****] 19
Facundo Tuesca f****a@t****m 17
Ramon Petgrave 3****4 11
Jack Leightcap j****p@t****m 10
dm a****e@t****m 7
Dimitri Papadopoulos Orfanos 3****s 5
Maya Costantini 6****i 4
Javan Lacerda j****a@g****m 4
Bob Callaway b****y 4
Aleks 1****I 4
Hugo van Kemenade 1****k 3
Hayden B h****n@g****m 2
laurentsimon 6****n 2
asraa a****a@g****m 2
Luke Hinds 7****s 2
Diogo Teles Sant'Anna d****8@g****m 2
Colleen Murphy c****y 2
Christian S. Perone p****e 2
Azeem Shaikh a****8@g****m 2
Arpit Jain 3****9 2
Cyril Cordoui c****i@r****m 1
Aaron Lew 6****2 1
Antonio Mazzini 3****i 1
Aroh Maurya 1****6 1
and 13 more...

Issue and Pull Request metadata

Last synced: 1 day ago

Total issues: 378
Total pull requests: 1,712
Average time to close issues: about 2 months
Average time to close pull requests: 4 days
Total issue authors: 56
Total pull request authors: 53
Average comments per issue: 2.68
Average comments per pull request: 1.45
Merged pull request: 1,414
Bot issues: 77
Bot pull requests: 1,005

Past year issues: 32
Past year pull requests: 162
Past year average time to close issues: 12 days
Past year average time to close pull requests: 3 days
Past year issue authors: 10
Past year pull request authors: 19
Past year average comments per issue: 1.88
Past year average comments per pull request: 0.78
Past year merged pull request: 102
Past year bot issues: 4
Past year bot pull requests: 117

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/sigstore/sigstore-python

Top Issue Authors

  • woodruffw (82)
  • jku (76)
  • github-actions[bot] (70)
  • tetsuo-cpp (30)
  • di (25)
  • ramonpetgrave64 (13)
  • mayaCostantini (7)
  • laurentsimon (6)
  • SequeI (5)
  • sethmlarson (4)
  • test-act-runner[bot] (3)
  • tnytown (3)
  • djhenderson (3)
  • dependabot[bot] (3)
  • diogoteles08 (2)

Top Pull Request Authors

  • dependabot[bot] (970)
  • woodruffw (326)
  • jku (89)
  • tetsuo-cpp (54)
  • di (40)
  • github-actions[bot] (35)
  • ramonpetgrave64 (34)
  • facutuesca (33)
  • tnytown (18)
  • DarkaMaul (15)
  • jleightcap (14)
  • DimitriPapadopoulos (9)
  • javanlacerda (8)
  • SequeI (6)
  • bobcallaway (4)

Top Issue Labels

  • enhancement (190)
  • bug (149)
  • component:cicd (79)
  • component:tests (74)
  • component:cli (28)
  • component:verification (25)
  • component:signing (15)
  • component:api (10)
  • refactoring (10)
  • good first issue (8)
  • chore (8)
  • dependencies (8)
  • component:tuf (8)
  • documentation (7)
  • qa (7)
  • upstream (4)
  • github_actions (3)
  • blocked (3)
  • duplicate (2)
  • help wanted (2)
  • question (2)
  • allstar (1)
  • plat:windows (1)
  • python (1)
  • embedded-root-update (1)

Top Pull Request Labels

  • dependencies (995)
  • python (489)
  • github_actions (401)
  • chore (111)
  • component:cicd (63)
  • component:api (59)
  • component:verification (51)
  • component:cli (44)
  • refactoring (43)
  • python:uv (41)
  • component:signing (40)
  • component:tests (26)
  • documentation (22)
  • enhancement (21)
  • component:tuf (16)
  • qa (14)
  • blocked (7)
  • bug (4)
  • go (2)
  • backport (2)
  • upstream (1)
  • invalid (1)
  • plat:macos (1)
  • plat:windows (1)

Package metadata

nixpkgs-24.11: python311Packages.sigstore

Codesigning tool for Python packages

pypi.org: sigstore

A tool for signing Python package distributions

proxy.golang.org: github.com/sigstore/sigstore-python

formulae.brew.sh: sigstore

Codesigning tool for Python packages

  • Homepage: https://github.com/sigstore/sigstore-python
  • Licenses: Apache-2.0
  • Latest release: 4.5.0 (published 23 days ago)
  • Last Synced: 2026-08-23T13:04:00.041Z (1 day ago)
  • Versions: 24
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Downloads: 45 Last month
  • Rankings:
    • Dependent packages count: 19.58%
    • Average: 47.071%
    • Dependent repos count: 56.82%
    • Downloads: 64.813%
gentoo-portage: dev-python/sigstore

A tool for signing Python package distributions

  • Homepage: https://github.com/sigstore/sigstore-python/
  • Documentation: https://packages.gentoo.org/packages/dev-python/sigstore
  • Licenses: Apache-2.0
  • Latest release: 4.5.0 (published 27 days ago)
  • Last Synced: 2026-08-09T01:32:09.543Z (16 days ago)
  • Versions: 5
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
nixpkgs-24.11: python312Packages.sigstore

Codesigning tool for Python packages

nixpkgs-24.05: python312Packages.sigstore

A codesigning tool for Python packages

nixpkgs-24.05: python311Packages.sigstore

A codesigning tool for Python packages

nixpkgs-unstable: python314Packages.sigstore

Codesigning tool for Python packages

nixpkgs-unstable: python313Packages.sigstore

Codesigning tool for Python packages

Dependencies

.github/actions/upload-coverage/action.yml actions
  • actions/upload-artifact v3.1.0 composite
.github/workflows/ci.yml actions
  • ./.github/actions/upload-coverage * composite
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/checkout 755da8c3cf115ac066823e79a1e1788f8940201b composite
  • actions/download-artifact v3.0.2 composite
  • actions/setup-python d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 composite
  • actions/setup-python 5ccb29d8773c3f3f653e1705f474dfaa8a06a912 composite
  • re-actors/alls-green 05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe composite
.github/workflows/conformance.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/setup-python d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 composite
  • sigstore/sigstore-conformance 0748d63c53810e36cc3f4bbe4114301080f0d844 composite
.github/workflows/docs.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/deploy-pages 0243b6c10d06cb8e95ed8ee471231877621202c0 composite
  • actions/setup-python d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 composite
  • actions/upload-pages-artifact 253fd476ed429e83b7aae64a92a75b4ceb1a17cf composite
.github/workflows/lint.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/setup-python d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 composite
  • re-actors/alls-green 05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe composite
.github/workflows/release.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/download-artifact 9bc31d5ccc31df68ecc42ccf4149144866c47d8a composite
  • actions/setup-python d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 composite
  • actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
  • pypa/gh-action-pypi-publish c7f29f7adef1a245bd91520e94867e5c6eedddcc composite
  • softprops/action-gh-release de2c0eb89ae2a093876385947365aca7b0e5f844 composite
.github/workflows/scorecards-analysis.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/upload-artifact 6673cd052c4cd6fcf4b4e6e60ea986c889389535 composite
  • github/codeql-action/upload-sarif 17573ee1cc1b9d061760f3a006fc4aac4f944fd5 composite
  • ossf/scorecard-action e38b1902ae4f44df626f11ba0734b14fb91f8f86 composite
.github/workflows/staging-tests.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/setup-python d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 composite
  • peter-evans/create-issue-from-file 433e51abf769039ee20ba1293a088ca19d573b7f composite
install/requirements.in pypi
  • sigstore *
install/requirements.txt pypi
  • appdirs ==1.4.4
  • betterproto ==2.0.0b5
  • certifi ==2022.12.7
  • cffi ==1.15.1
  • charset-normalizer ==3.0.1
  • cryptography ==39.0.1
  • grpclib ==0.4.3
  • h2 ==4.1.0
  • hpack ==4.0.0
  • hyperframe ==6.0.1
  • idna ==3.4
  • multidict ==6.0.4
  • pycparser ==2.21
  • pydantic ==1.10.5
  • pyjwt ==2.6.0
  • pyopenssl ==23.0.0
  • python-dateutil ==2.8.2
  • requests ==2.28.2
  • securesystemslib ==0.26.0
  • sigstore ==1.1.0
  • sigstore-protobuf-specs ==0.1.0
  • six ==1.16.0
  • tuf ==2.1.0
  • typing-extensions ==4.5.0
  • urllib3 ==1.26.14
pyproject.toml pypi
  • appdirs ~= 1.4
  • cryptography >= 39
  • importlib_resources ~= 5.7; python_version < '3.11'
  • pyOpenSSL >= 23.0.0
  • pydantic *
  • pyjwt >= 2.1
  • requests *
  • securesystemslib *
  • sigstore-protobuf-specs ~= 0.1.0
  • tuf ~= 2.1
.github/workflows/pin-requirements.yml actions
  • actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
  • actions/setup-python bd6b4b6205c4dbad673328db7b31b7fab9e241c0 composite
  • peter-evans/create-pull-request 153407881ec5c347639a548ade7d8ad1d6740e38 composite
.github/workflows/requirements.yml actions
  • actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
  • actions/setup-python bd6b4b6205c4dbad673328db7b31b7fab9e241c0 composite
.github/workflows/depsreview.yml actions
uv.lock pypi
  • annotated-types 0.7.0
  • ast-serialize 0.6.0
  • babel 2.18.0
  • backrefs 7.0
  • bandit 1.9.4
  • build 1.5.0
  • bump 1.4.0
  • cairocffi 1.7.1
  • cairosvg 2.9.0
  • certifi 2026.4.22
  • cffi 2.0.0
  • charset-normalizer 3.4.7
  • click 8.3.3
  • colorama 0.4.6
  • coverage 7.13.5
  • cryptography 50.0.0
  • cssselect2 0.9.0
  • defusedxml 0.7.1
  • dnspython 2.8.0
  • email-validator 2.3.0
  • exceptiongroup 1.3.1
  • first 2.0.2
  • ghp-import 2.1.0
  • griffelib 2.0.2
  • id 1.6.1
  • idna 3.15
  • importlib-metadata 9.0.0
  • importlib-resources 5.13.0
  • iniconfig 2.3.0
  • jinja2 3.1.6
  • librt 0.13.0
  • markdown 3.10.2
  • markdown-it-py 4.2.0
  • markupsafe 3.0.3
  • mdurl 0.1.2
  • mergedeep 1.3.4
  • mkdocs 1.6.1
  • mkdocs-autorefs 1.4.4
  • mkdocs-get-deps 0.2.2
  • mkdocs-material 9.7.6
  • mkdocs-material-extensions 1.3.1
  • mkdocstrings 1.0.4
  • mkdocstrings-python 2.0.5
  • mypy 2.3.0
  • mypy-extensions 1.1.0
  • packaging 26.2
  • paginate 0.5.7
  • pathspec 1.1.1
  • pillow 12.3.0
  • pip 26.1.2
  • pip-tools 7.6.0
  • platformdirs 4.11.0
  • pluggy 1.6.0
  • pretend 1.0.9
  • pyasn1 0.6.4
  • pycparser 3.0
  • pydantic 2.13.4
  • pydantic-core 2.46.4
  • pygments 2.20.0
  • pyjwt 2.13.0
  • pymdown-extensions 11.0.1
  • pyopenssl 26.4.0
  • pyproject-hooks 1.2.0
  • pytest 9.1.1
  • pytest-cov 7.1.0
  • python-dateutil 2.9.0.post0
  • pyyaml 6.0.3
  • pyyaml-env-tag 1.1
  • requests 2.34.2
  • rfc3161-client 1.0.8
  • rfc8785 0.1.4
  • rich 15.0.0
  • ruff 0.15.22
  • securesystemslib 1.3.1
  • setuptools 83.0.0
  • sigstore *
  • sigstore-models 0.0.6
  • sigstore-rekor-types 0.0.18
  • six 1.17.0
  • stevedore 5.7.0
  • tinycss2 1.5.1
  • toml 0.10.2
  • tomli 2.4.1
  • tuf 7.0.0
  • types-cffi 2.0.0.20260506
  • types-pyopenssl 24.1.0.20240722
  • types-setuptools 82.0.0.20260408
  • typing-extensions 4.15.0
  • typing-inspection 0.4.2
  • urllib3 2.7.0
  • watchdog 6.0.0
  • webencodings 0.5.1
  • wheel 0.47.0
  • zipp 4.1.0
.github/workflows/cross-version-verify.yaml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/download-artifact 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c composite
  • actions/upload-artifact 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a composite
  • astral-sh/setup-uv c771a70e6277c0a99b617c7a806ffedaca235ff9 composite
.github/workflows/check-embedded-root.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/github-script 3a2844b7e9c422d3c10d287c895573f7108da1b3 composite
  • astral-sh/setup-uv c771a70e6277c0a99b617c7a806ffedaca235ff9 composite
.github/workflows/cross-os.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/download-artifact 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c composite
  • actions/upload-artifact 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a composite
  • astral-sh/setup-uv c771a70e6277c0a99b617c7a806ffedaca235ff9 composite