---
title: "Changes to Show the attestation statement for a specific package."
method: GET
path: "/v1/packages/{package_platform}/{package_name}/attestation-statement"
---

# Changes to Show the attestation statement for a specific package.

`GET /v1/packages/{package_platform}/{package_name}/attestation-statement`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 3 of 5 revisions.

- **2025-04-26** `b00b0798eebb`: 1 info
- **2024-08-10** `750fbd28bc2c`: 1 warning
- **2024-04-12** `1146b360bd91`: 2 warning, 37 info

## Changes

- **2025-04-26** `b00b0798eebb`: 1 info
  - added the non-success response with the status `400`
- **2024-08-10** `750fbd28bc2c`: 1 warning
  - removed the optional property `ReproducibleBuilds` from the response with the `200` status
- **2024-04-12** `1146b360bd91`: 2 warning, 37 info
  - removed the optional property `SBOM/items/Format` from the response with the `200` status
  - removed the optional property `SBOM/items/Version` from the response with the `200` status
  - the security scope `organization` was added to the endpoint's security scheme `BearerAuth`
  - the response property `CleanReleaseAvailable` became required for the status `200`
  - the response property `CodeReviewPractice` became required for the status `200`
  - the response property `DependenciesAreManaged` became required for the status `200`
  - the response property `DocumentedBuildPractices` became required for the status `200`
  - the response property `FixedVulnerabilities` became required for the status `200`
  - the response property `FuzzingPractice` became required for the status `200`
  - the response property `IncomeStreams` became required for the status `200`
  - the response property `IncomeStreams/oneOf[subschema #2]/items/EvidenceURL` became required for the status `200`
  - the response property `IncomeStreams/oneOf[subschema #2]/items/LastModifiedDateTimeUTC` became required for the status `200`
  - the response property `IncomeStreams/oneOf[subschema #2]/items/Type` became required for the status `200`
  - the response property `KnownReleasesURL` became required for the status `200`
  - the response property `KnownVulnerabilitiesURL` became required for the status `200`
  - the response property `LatestStableRelease` became required for the status `200`
  - the response property `NoBinariesInRepository` became required for the status `200`
  - the response property `PURL` became required for the status `200`
  - the response property `PackageManagerMFAEnabled` became required for the status `200`
  - the response property `PackageName` became required for the status `200`
  - the response property `PackagePlatform` became required for the status `200`
  - the response property `PackageSecurityContact` became required for the status `200`
  - the response property `PackageSecurityPolicyURL` became required for the status `200`
  - the response property `PackageStatus` became required for the status `200`
  - the response property `PackageStatus/LastModifiedDateTimeUTC` became required for the status `200`
  - the response property `PackageStatus/Status` became required for the status `200`
  - the response property `ReleasesInUse` became required for the status `200`
  - the response property `SBOM` became required for the status `200`
  - the response property `SBOM/items/DigitalSignatureURL` became required for the status `200`
  - the response property `SBOM/items/Type` became required for the status `200`
  - the response property `SBOM/items/URL` became required for the status `200`
  - the response property `SDLCEvidenceDataURL` became required for the status `200`
  - the response property `SDLCPolicyURL` became required for the status `200`
  - the response property `SPDXLicenseLatestRelease` became required for the status `200`
  - the response property `SecurityResponsive` became required for the status `200`
  - the response property `SourceRepoMFAEnabled` became required for the status `200`
  - the response property `UpstreamRepositoryURL` became required for the status `200`
  - added the required property `MultipleMaintainers` to the response with the `200` status
  - added the required property `SuccessionPlan` to the response with the `200` status

---

[Operation](https://skmtc.dev/tidelift/apis/tidelift-external-api/docs/v1/packages/:package_platform/:package_name/attestation-statement/get.md) - [API](https://skmtc.dev/tidelift/apis/tidelift-external-api.md) - [Page](https://skmtc.dev/tidelift/apis/tidelift-external-api/changes/v1/packages/:package_platform/:package_name/attestation-statement/get)
