SOFTWARE OVERVIEW

trustcheck

trustcheck verifies attestations for packages from the Python Package Index and supports stronger Python software-supply-chain security.

About trustcheck

trustcheck verifies attestations for packages from the Python Package Index and supports stronger Python software-supply-chain security. Package attestations provide information intended to establish where a package came from and how it was built. Verifying them can help users assess the provenance of a dependency before relying on it. The tool is focused on package verification rather than vulnerability scanning or dependency installation. The supplied information does not describe supported attestation formats, verification commands, or how results are reported. Its established role is checking Python package attestations to improve confidence in package origin and build provenance. This can be part of a broader review of third-party dependencies before they are used in software.

Categories

Platforms

Website & Downloads

Trusted package or store listing

Open winget listing ↗

Related software

  • .NET Reactor — .NET Reactor is a code-protection and software-licensing system for applications built on the .NET Framework.
  • 010 Editor — 010 Editor is a text and hexadecimal editor with Binary Templates technology.
  • 10x — 10x is a Windows code editor designed for large C++ projects.
  • 8051 Disassembler — 8051 Disassembler converts Intel HEX files for the 8051 microcontroller family into readable assembly listings.
  • ACS — ACS, or Admin Config Service, is a command-line interface for managing configuration and administrative tasks in a cloud platform.
  • APK Editor Studio — APK Editor Studio is an APK editor and reverse-engineering tool for desktop computers.
trustcheck | Soft20