{
  "package": "httpx",
  "normalized_name": "httpx",
  "version": "0.28.1",
  "role": "transitive",
  "declared_line": null,
  "artifact": "httpx-0.28.1-py3-none-any.whl",
  "artifact_url": "https://files.pythonhosted.org/packages/2a/39/e50c7c3a983047577ee07d2a9e53faf5a69493943ec3f6a384bdc792deb2/httpx-0.28.1-py3-none-any.whl",
  "artifact_sha256_per_index": "d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad",
  "limbs": {
    "index_resolves": {
      "status": "ok",
      "resolved_version": "0.28.1",
      "artifact": "httpx-0.28.1-py3-none-any.whl"
    },
    "provenance_published": {
      "status": "fail",
      "reason": "no_provenance_published",
      "http_status": 404,
      "meaning": "the uploader published no PEP 740 attestation for this artifact"
    },
    "bundle_wellformed": {
      "status": "not_reached"
    },
    "artifact_bytes_match_index": {
      "status": "not_reached"
    },
    "signature_verifies": {
      "status": "not_reached"
    },
    "signer_matches_declared_source": {
      "status": "not_reached"
    },
    "predicate_is_slsa_build_provenance": {
      "status": "not_reached"
    },
    "attestation_in_transparency_log": {
      "status": "not_reached"
    }
  },
  "must_admit": false,
  "full_admit": false,
  "first_failing_limb": "provenance_published",
  "first_refuse_reason": "provenance_published:no_provenance_published",
  "notes": {
    "provenance_url": "https://pypi.org/integrity/httpx/0.28.1/httpx-0.28.1-py3-none-any.whl/provenance"
  }
}