Search Packages

sigstore-models

Pydantic-based, protobuf-free data models for Sigstore

model-signing

Supply chain security for ML

trustcheck

Verify PyPI package attestations and improve Python supply-chain security

securescan

Security scanning without the SaaS tax. Multi-scanner orchestration, baseline diffing, SBOM + SARIF, signed everything — runs in your terminal, your CI, or a dashboard you own.

arkforge-mcp

Third-party cryptographic proof for AI agent API calls — ArkForge Trust Layer MCP server

veritensor

Antivirus for the AI Supply Chain. Scans models, datasets, notebooks, and RAG documents for threats.

squash-ai

🛡️ Automated EU AI Act compliance for AI/ML teams — Annex IV docs, SBOMs, policy checks, and signed audit records inside your CI/CD pipeline. August 2, 2026 enforcement deadline. ⏰

mcpkernel

Open-source MCP/A2A security gateway — policy enforcement, taint tracking, sandboxed execution, deterministic envelopes, and Sigstore audit for every AI agent tool call. OWASP ASI 2026 compliant.

h4-hello

A practice project for publishing Python projects created with uv to PyPI with PEP740 signatures.

whiteprints

A Copier-based cookiecutter for creating Python projects managed by uv.