Project sigstore (free software signing service) just released a library to sign and verify python packages

This page summarizes the projects mentioned and recommended in the original post on /r/Python
supply-chain Security Python provenance codesigning

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured

  • sigstore-python

    A Sigstore client for Python

  • rekor

    Software Supply Chain Transparency Log

    • Anyone not in the know on sigstore, its a lets encrypt style software signing service funded by the OpenSSF (Open Source Security Foundation). Plans are in place to migrate this into PyPa so that packages can be signed and verified.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Show HN: One makefile to rule them all

    3 projects | news.ycombinator.com | 19 Oct 2023

  • Obtainium – Get Android App Updates Directly from the Source

    2 projects | news.ycombinator.com | 10 Oct 2023

  • PGP signatures on PyPI: worse than useless

    1 project | /r/programming | 22 May 2023

  • How Attackers Can Sneakily Slip Malware Packages Into Poetry.lock Files

    2 projects | /r/Python | 2 May 2023

  • 50% new NPM packages are spam

    4 projects | news.ycombinator.com | 30 Mar 2023