XPost: linux.debian.bugs.dist, linux.debian.maint.python 
 From: simon@josefsson.org 
  
 Package: wnpp 
 Severity: wishlist 
 Owner: Simon Josefsson  
 X-Debbugs-Cc: debian-devel@lists.debian.org, debian-python@lists.debian.org 
  
 * Package name    : python-pypi-attestations 
   Version         : 0.0.27 
 * URL             : https://github.com/trailofbits/pypi-attestations 
 * License         : Apache 2.0 
   Programming Lang: Python 
   Description     : convert between Sigstore Bundles and PEP 740 Attestation 
 objects 
  
  A library to generate and convert between Sigstore Bundles and [PEP 
  740] Attestation objects. 
  
  Use these APIs to create a PEP 740-compliant `Attestation` object by 
  signing a Python artifact (i.e: sdist or wheel files), and to verify an 
  `Attestation` object against a Python artifact. 
  
 https://salsa.debian.org/python-team/packages/python-pypi-attestations/ 
  
 /Simon 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQNoBAEWCAMQFiEEo8ychwudMQq61M8vUXIrCP5HRaIFAmirc7QUHHNpbW9uQGpv 
 c2Vmc3Nvbi5vcmfCHCYAmDMEXJLOtBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9f 
 V+QlTmXxo2naObDuGtw58YaxlOu0JVNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9z 
 ZWZzc29uLm9yZz6IlgQTFggAPgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYh 
 BLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XQkBQkNZGbwAAoJENc89jjFPAa+BtIA 
 /iR73CfBurG9y8pASh3cbGOMHpDZfMAtosu6jbpO69GHAP4p7l57d+iVty2VQMsx 
 +3TCSAvZkpr4P/FuTzZ8JZe8BrgzBFySz4EWCSsGAQQB2kcPAQEHQOxTCIOaeXAx 
 I2hIX4HK9bQTpNVei708oNr1Klm8qCGKiPUEGBYIACYCGwIWIQSx0r0Tdb7LeEz0 
 +MTXPPY4xTwGvgUCZ9F0SgUJDWRmSQCBdiAEGRYIAB0WIQSjzJyHC50xCrrUzy9R 
 cisI/kdFogUCXJLPgQAKCRBRcisI/kdFoqdMAQCgH45aseZgIrwKOvUOA9QfsmeE 
 8GZHYNuFHmM9FEQS6AD6A4x5aYvoY6lo98pgtw2HPDhmcCXFItjXCrV4A0GmJA4J 
 ENc89jjFPAa+wUUBAO64fbZek6FPlRK0DrlWsrjCXuLi6PUxyzCAY6lG2nhUAQC6 
 qobB9mkZlZ0qihy1x4JRtflqFcqqT9n7iUZkCDIiDbg4BFySz2oSCisGAQQBl1UB 
 BQEBB0AxlRumDW6nZY7A+VCfek9VpEx6PJmdJyYPt3lNHMd6HAMBCAeIfgQYFggA 
 JgIbDBYhBLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XTSBQkNZGboAAoJENc89jjF 
 PAa+0M0BAPPRq73kLnHYNDMniVBOzUdi2XeF32idjEWWfjvyIJUOAP4wZ+ALxIeh 
 is3Uw2BzGZE6ttXQ2Q+DeCJO3TPpIqaXDAAKCRBRcisI/kdFogsJAP96ynx8jm9U 
 zytatukoLc95lmyDxOoch+Om5ZIGiEU9xAD+NqcShVTBkwBR7eATmCeTnqqcsqzi 
 mfgbTtBKN4zW6QI= 
 =W6mQ 
 -----END PGP SIGNATURE----- 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)