{
  "package": "frozenlist",
  "normalized_name": "frozenlist",
  "version": "1.8.0",
  "role": "transitive",
  "declared_line": null,
  "artifact": "frozenlist-1.8.0-cp311-cp311-macosx_11_0_arm64.whl",
  "artifact_url": "https://files.pythonhosted.org/packages/6e/ef/0e8f1fe32f8a53dd26bdd1f9347efe0778b0fddf62789ea683f4cc7d787d/frozenlist-1.8.0-cp311-cp311-macosx_11_0_arm64.whl",
  "artifact_sha256_per_index": "fa47e444b8ba08fffd1c18e8cdb9a75db1b6a27f17507522834ad13ed5922b93",
  "limbs": {
    "index_resolves": {
      "status": "ok",
      "resolved_version": "1.8.0",
      "artifact": "frozenlist-1.8.0-cp311-cp311-macosx_11_0_arm64.whl"
    },
    "provenance_published": {
      "status": "ok",
      "http_status": 200
    },
    "bundle_wellformed": {
      "status": "ok",
      "bundles": 1,
      "publisher_kind": "GitHub",
      "publisher_repository": "aio-libs/frozenlist",
      "publisher_workflow": "ci-cd.yml"
    },
    "artifact_bytes_match_index": {
      "status": "ok",
      "sha256": "fa47e444b8ba08fffd1c18e8cdb9a75db1b6a27f17507522834ad13ed5922b93",
      "bytes": 50119
    },
    "signature_verifies": {
      "status": "ok",
      "verified_against": "fa47e444b8ba08fffd1c18e8cdb9a75db1b6a27f17507522834ad13ed5922b93",
      "identity": {
        "kind": "GitHub",
        "repository": "aio-libs/frozenlist",
        "workflow": "ci-cd.yml",
        "environment": "pypi"
      },
      "predicate_type": "https://docs.pypi.org/attestations/publish/v1"
    },
    "signer_matches_declared_source": {
      "status": "ok",
      "repository": "aio-libs/frozenlist",
      "matched_against": [
        "aio-libs/frozenlist",
        "aio-libs/.github"
      ]
    },
    "predicate_is_slsa_build_provenance": {
      "status": "fail",
      "reason": "publish_attestation_not_build_provenance",
      "predicate_type": "https://docs.pypi.org/attestations/publish/v1",
      "meaning": "the signature proves which workflow uploaded the file; it does not describe how the file was built"
    },
    "attestation_in_transparency_log": {
      "status": "ok",
      "log_indexes": [
        "584817147"
      ],
      "log": "rekor"
    }
  },
  "must_admit": true,
  "full_admit": false,
  "first_failing_limb": "predicate_is_slsa_build_provenance",
  "first_refuse_reason": "predicate_is_slsa_build_provenance:publish_attestation_not_build_provenance",
  "notes": {
    "provenance_url": "https://pypi.org/integrity/frozenlist/1.8.0/frozenlist-1.8.0-cp311-cp311-macosx_11_0_arm64.whl/provenance",
    "publisher": {
      "environment": "pypi",
      "kind": "GitHub",
      "repository": "aio-libs/frozenlist",
      "workflow": "ci-cd.yml"
    },
    "attestation_count": 1,
    "artifact_bytes": 50119,
    "artifact_sha256_computed": "fa47e444b8ba08fffd1c18e8cdb9a75db1b6a27f17507522834ad13ed5922b93",
    "predicate_type": "https://docs.pypi.org/attestations/publish/v1",
    "declared_source_repos": [
      "aio-libs/frozenlist",
      "aio-libs/.github"
    ]
  }
}