TItidelift
Packages

Show the attestation statement for a specific package.

Changed on

Show the attestation statement for a specific package

get/v1/packages/{package_platform}/{package_name}/attestation-statement

Request

  • Base URL
    https://api.tidelift.com/external-api
  • Auth
    HTTP bearer

Path parameters

package_platformstring required
Example:rubygems

The platform of the package.

package_namestring required
Example:rails

The name of the package to look up.

Response

Details of the package

PackageNamestring required
PackagePlatformstring required
PURLstring required
UpstreamRepositoryURLstring required
SPDXLicenseLatestReleasestring required
LatestStableReleasestring required
ReleasesInUsestring[] required
PackageManagerMFAEnabledstring required
SourceRepoMFAEnabledstring required
DocumentedBuildPracticesstring required
KnownReleasesURLstring required
CleanReleaseAvailablestring required
FixedVulnerabilitiesstring required
DependenciesAreManagedstring required
KnownVulnerabilitiesURLstring required
PackageSecurityPolicyURLstring required
PackageSecurityContactstring required
SecurityResponsivestring required
MultipleMaintainersstring required
SuccessionPlanstring required
NoBinariesInRepositorystring required
CodeReviewPracticestring required
FuzzingPracticestring required
ReleasesDigitallySignedstring
SDLCPolicyURLstring required
SDLCEvidenceDataURLstring required

Changes