Securesystemslib

Latest version: v1.0.0

Safety actively analyzes 630130 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 7

0.15.0

Not secure
* Allow Blake (blake2s and blake2b) hashing algorithms (218)
* *new features*
* Add nistp384 signature verification support (228)
* Allow callers to provide a default keyid in format_metadata_to_key, rather
than using the default keyid value of a hash of the canonical JSON of the
key metadata (225)
* Implement files and directories abstraction as an abstract base class;
StorageBackendInterface, with a concrete implementation for local
filesystems; FilesystemBackend (232). This enables users, such as tuf,
to support non-local/non-traditional filesystems, so long as they provide
an object implementing securesystemslib.storage.StorageBackendInterface.
All functions which take a StorageBackendInterface default to creating a
FilesystemBackend object for local filesystem interaction when an object
isn't provided. This means that behaviour remains the same as in prior
(0.14.x) releases of securesystemslib, only instead of throwing exceptions
from the Python standard library a custom, generic, error is thrown:
securesystemslib.exceptions.StorageError
* *removed features*
* Remove support for gzipped files in load_json_file (230)

0.14.2

Not secure
* Re-enable OpenPGP signature verification without GnuPG (215)

0.14.1

Not secure
* Improve logging (212, 211)
* Fix dependency monitoring and revise requirements files (209)
* Further improve optional dependency handling (206)
* Update release metadata (205)

0.14.0

Not secure
* *behavior change*
* Default to pure Python ed25519 signature verification when nacl is unavailable (200)
* Fix settings.SUBPROCESS_TIMEOUT access in process module (202)
* Improve schema-related error message (199)
* Generally improve optional dependency handling (200)
* Enhance test configuration, fix typos and remove unused code (201)
* Fix improper identity check (203)

0.13.1

Not secure
* Fix MANIFEST.in to include all test data in source release (196)

0.13.0

Not secure
* Add support for *OpenPGP* EdDSA/ed25519 keys and signatures (188)
bump

Page 4 of 7

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.