{
  "package": "cffi",
  "normalized_name": "cffi",
  "version": "2.1.0",
  "role": "transitive",
  "declared_line": null,
  "artifact": "cffi-2.1.0-cp311-cp311-macosx_11_0_arm64.whl",
  "artifact_url": "https://files.pythonhosted.org/packages/ea/dd/e3b0baa2d3d6a857ac72b7efbf18e32e487c9cdafcc13049ad765495b15e/cffi-2.1.0-cp311-cp311-macosx_11_0_arm64.whl",
  "artifact_sha256_per_index": "f5bce581e6b8c235e566a14768a943b172ada3ed73537bb0c0be1edee312d4e7",
  "limbs": {
    "index_resolves": {
      "status": "ok",
      "resolved_version": "2.1.0",
      "artifact": "cffi-2.1.0-cp311-cp311-macosx_11_0_arm64.whl"
    },
    "provenance_published": {
      "status": "fail",
      "reason": "no_provenance_published",
      "http_status": 404,
      "meaning": "the uploader published no PEP 740 attestation for this artifact"
    },
    "bundle_wellformed": {
      "status": "not_reached"
    },
    "artifact_bytes_match_index": {
      "status": "not_reached"
    },
    "signature_verifies": {
      "status": "not_reached"
    },
    "signer_matches_declared_source": {
      "status": "not_reached"
    },
    "predicate_is_slsa_build_provenance": {
      "status": "not_reached"
    },
    "attestation_in_transparency_log": {
      "status": "not_reached"
    }
  },
  "must_admit": false,
  "full_admit": false,
  "first_failing_limb": "provenance_published",
  "first_refuse_reason": "provenance_published:no_provenance_published",
  "notes": {
    "provenance_url": "https://pypi.org/integrity/cffi/2.1.0/cffi-2.1.0-cp311-cp311-macosx_11_0_arm64.whl/provenance"
  }
}