{
  "package": "truststore",
  "normalized_name": "truststore",
  "version": "0.10.4",
  "role": "transitive",
  "declared_line": null,
  "artifact": "truststore-0.10.4-py3-none-any.whl",
  "artifact_url": "https://files.pythonhosted.org/packages/19/97/56608b2249fe206a67cd573bc93cd9896e1efb9e98bce9c163bcdc704b88/truststore-0.10.4-py3-none-any.whl",
  "artifact_sha256_per_index": "adaeaecf1cbb5f4de3b1959b42d41f6fab57b2b1666adb59e89cb0b53361d981",
  "limbs": {
    "index_resolves": {
      "status": "ok",
      "resolved_version": "0.10.4",
      "artifact": "truststore-0.10.4-py3-none-any.whl"
    },
    "provenance_published": {
      "status": "fail",
      "reason": "no_provenance_published",
      "http_status": 404,
      "meaning": "the uploader published no PEP 740 attestation for this artifact"
    },
    "bundle_wellformed": {
      "status": "not_reached"
    },
    "artifact_bytes_match_index": {
      "status": "not_reached"
    },
    "signature_verifies": {
      "status": "not_reached"
    },
    "signer_matches_declared_source": {
      "status": "not_reached"
    },
    "predicate_is_slsa_build_provenance": {
      "status": "not_reached"
    },
    "attestation_in_transparency_log": {
      "status": "not_reached"
    }
  },
  "must_admit": false,
  "full_admit": false,
  "first_failing_limb": "provenance_published",
  "first_refuse_reason": "provenance_published:no_provenance_published",
  "notes": {
    "provenance_url": "https://pypi.org/integrity/truststore/0.10.4/truststore-0.10.4-py3-none-any.whl/provenance"
  }
}