{
  "package": "pycryptodome",
  "normalized_name": "pycryptodome",
  "version": "3.23.0",
  "role": "transitive",
  "declared_line": null,
  "artifact": "pycryptodome-3.23.0-cp37-abi3-macosx_10_9_universal2.whl",
  "artifact_url": "https://files.pythonhosted.org/packages/db/6c/a1f71542c969912bb0e106f64f60a56cc1f0fabecf9396f45accbe63fa68/pycryptodome-3.23.0-cp37-abi3-macosx_10_9_universal2.whl",
  "artifact_sha256_per_index": "187058ab80b3281b1de11c2e6842a357a1f71b42cb1e15bce373f3d238135c27",
  "limbs": {
    "index_resolves": {
      "status": "ok",
      "resolved_version": "3.23.0",
      "artifact": "pycryptodome-3.23.0-cp37-abi3-macosx_10_9_universal2.whl"
    },
    "provenance_published": {
      "status": "fail",
      "reason": "no_provenance_published",
      "http_status": 404,
      "meaning": "the uploader published no PEP 740 attestation for this artifact"
    },
    "bundle_wellformed": {
      "status": "not_reached"
    },
    "artifact_bytes_match_index": {
      "status": "not_reached"
    },
    "signature_verifies": {
      "status": "not_reached"
    },
    "signer_matches_declared_source": {
      "status": "not_reached"
    },
    "predicate_is_slsa_build_provenance": {
      "status": "not_reached"
    },
    "attestation_in_transparency_log": {
      "status": "not_reached"
    }
  },
  "must_admit": false,
  "full_admit": false,
  "first_failing_limb": "provenance_published",
  "first_refuse_reason": "provenance_published:no_provenance_published",
  "notes": {
    "provenance_url": "https://pypi.org/integrity/pycryptodome/3.23.0/pycryptodome-3.23.0-cp37-abi3-macosx_10_9_universal2.whl/provenance"
  }
}