slsa-verifier
Niquests
slsa-verifier | Niquests | |
---|---|---|
2 | 6 | |
205 | 749 | |
2.9% | 11.6% | |
8.4 | 8.7 | |
6 days ago | about 17 hours ago | |
Go | Python | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
slsa-verifier
-
10 reasons you should quit your HTTP client
Each of our releases comes with SLSA provenance data (multiple.intoto.jsonl), which can be used to verify the source and provenance of the binaries with the slsa-verifier tool.
-
Python 3.12.0 from a supply chain security perspective
My biggest takeaway from this article is the Supply chain Levels for Software Artifacts (SLSA) security framework: https://github.com/slsa-framework/slsa-verifier
Niquests
-
Revived the promise made six years ago for Requests 3
Just around my intent to give up on urllib3 evolution, we proposed a fork of both urllib3 and Requests, namely urllib3-future and Niquests.
- Support Happy Eyeballs Even with QUIC / HTTP3 in Python
- Show HN: Safest, Fastest, Easiest, and Most Advanced" Python HTTP Client
- The biggest leap forward in HTTP clients for Python in years
-
10 reasons you should quit your HTTP client
Source: https://github.com/jawah/niquests PyPI: https://pepy.tech/project/niquests Docs: https://niquests.readthedocs.io/en/latest/
What are some alternatives?
encapsule
httpx - A next generation HTTP client for Python. 🦋
guac - GUAC aggregates software security metadata into a high fidelity graph database.
requests - A simple, yet elegant, HTTP library.
setuptools - Official project repository for the Setuptools build system
aioquic - QUIC and HTTP/3 implementation in Python
wg-securing-software-https
python-proxy - HTTP/HTTP2/HTTP3/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.
urllib3.future - urllib3.future is the supercharged low level http client we dreamed of. Support HTTP/1.1, HTTP/2, and HTTP/3 with multiplexed connections! With DNS over QUIC, TLS, HTTPS and UDP. DNSSEC Protected & Async!
urllib3 - urllib3 is a user-friendly HTTP client library for Python
slsa - Supply-chain Levels for Software Artifacts