{
  "package": "hexbytes",
  "normalized_name": "hexbytes",
  "version": "1.3.1",
  "role": "transitive",
  "declared_line": null,
  "artifact": "hexbytes-1.3.1-py3-none-any.whl",
  "artifact_url": "https://files.pythonhosted.org/packages/8d/e0/3b31492b1c89da3c5a846680517871455b30c54738486fc57ac79a5761bd/hexbytes-1.3.1-py3-none-any.whl",
  "artifact_sha256_per_index": "da01ff24a1a9a2b1881c4b85f0e9f9b0f51b526b379ffa23832ae7899d29c2c7",
  "limbs": {
    "index_resolves": {
      "status": "ok",
      "resolved_version": "1.3.1",
      "artifact": "hexbytes-1.3.1-py3-none-any.whl"
    },
    "provenance_published": {
      "status": "fail",
      "reason": "no_provenance_published",
      "http_status": 404,
      "meaning": "the uploader published no PEP 740 attestation for this artifact"
    },
    "bundle_wellformed": {
      "status": "not_reached"
    },
    "artifact_bytes_match_index": {
      "status": "not_reached"
    },
    "signature_verifies": {
      "status": "not_reached"
    },
    "signer_matches_declared_source": {
      "status": "not_reached"
    },
    "predicate_is_slsa_build_provenance": {
      "status": "not_reached"
    },
    "attestation_in_transparency_log": {
      "status": "not_reached"
    }
  },
  "must_admit": false,
  "full_admit": false,
  "first_failing_limb": "provenance_published",
  "first_refuse_reason": "provenance_published:no_provenance_published",
  "notes": {
    "provenance_url": "https://pypi.org/integrity/hexbytes/1.3.1/hexbytes-1.3.1-py3-none-any.whl/provenance"
  }
}