{"adoption": {"forks": 162, "observed_at": "2026-08-28T04:03:18.309531+00:00", "stars": 1032}, "canonical_url": "https://ross.abutalabs.com/products/in-toto", "card": {"archived": false, "artifact_type": "library", "description": "in-toto is a framework to protect supply chain integrity.", "domain": ["security", "developer-tools"], "enriched": true, "function": ["security", "cryptography", "developer-tools", "cli", "sdk"], "health_score": 96, "homepage": "https://in-toto.io", "language": "Python", "license": "NOASSERTION", "license_family": "other", "maturity": "stable", "member_repos": ["in-toto/in-toto"], "name": "in-toto/in-toto", "platform": ["python", "cli", "cross-platform"], "pushed_at": "2026-08-05T03:30:39+00:00", "repo": "in-toto/in-toto", "stars": 1032, "tags": ["supply-chain-security", "software-supply-chain", "metadata", "attestation", "cncf", "provenance", "verification", "devops", "automation"], "topics": ["supply-chain", "security", "new-york-university", "secure-systems-lab"], "urls": [], "use_cases": ["verify software supply chain integrity", "prove who ran each build and packaging step", "detect tampering in build artifacts", "define authorized steps for a software pipeline", "generate signed link metadata for supply chain steps", "verify a package was built as planned before installing"], "what_it_is": "in-toto is a Python framework and reference implementation of the in-toto specification for protecting software supply chain integrity. It lets project owners define supply chain layouts and verifies that each step was performed by authorized functionaries without tampering, using signed link metadata.", "when_to_avoid": ["you only need artifact signing without step-by-step supply chain verification", "you need a non-Python implementation and cannot use the reference library", "your project has no defined build or release pipeline to model"], "when_to_choose": ["you need cryptographically verifiable provenance for your software supply chain", "you want to enforce that only authorized personnel perform build steps", "you need an open CNCF-graduated standard with a Python reference implementation", "you want to detect supply chain compromises before end-user installation"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/in-toto", "repo": "in-toto/in-toto", "role": "main", "score": 81}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:18.309531+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T07:06:44.956028+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "855431d2161b5ece73a5374d874ba37db1030e324614b882813a3fd8affc74aa", "fetched_at": "2026-08-28T04:03:18.309531+00:00", "kind": "readme", "missing": false, "url": "https://github.com/in-toto/in-toto"}, {"content_hash": "043b69d22818e66439a8bfeb3db6a395bbb148e84e72cca259cf91407aab7a79", "fetched_at": "2026-08-29T13:06:53.357284+00:00", "kind": "homepage", "missing": false, "url": "https://in-toto.io"}, {"content_hash": "c6e7bf8c6e6ec3a48a294fb8916b151995fcb793860f6b9b4c5ccb8b95fe36c6", "fetched_at": "2026-08-29T13:06:53.359726+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/about"}, {"content_hash": "51b5af79a5d3c2e50626462fc45d1c4ca74ac77a5a5b6e4410fcd244d50e45ff", "fetched_at": "2026-08-29T13:06:53.361484+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs"}, {"content_hash": "1c33a91a5243bd9548245087f937b8026ae688bf200399882b66b60dddb522a8", "fetched_at": "2026-08-29T13:06:53.363143+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/what-is-in-toto"}, {"content_hash": "14d3add9c52aa8a2eb8f6002a41075a034375ab54e211040a97e5c2e131ac36b", "fetched_at": "2026-08-29T13:06:53.364812+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/getting-started"}, {"content_hash": "06459667f4b23e4f6f5084dafc8c4fc6e2b31cde20a4e159615ce29859397936", "fetched_at": "2026-08-29T13:06:53.366790+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/specs"}, {"content_hash": "45de480be5a5584ec0db531c55a200fbb46be25bb24cb73c5a39e8f659160d25", "fetched_at": "2026-08-29T13:06:53.368363+00:00", "kind": "site_page", "missing": false, "url": "https://in-toto.io/docs/security"}, {"content_hash": "29554df27f5fe6752bf1676efc81fa80b9eb61cf1d7e46e0cffae61133fa1962", "fetched_at": "2026-08-29T13:06:53.369993+00:00", "kind": "registry_pypi", "missing": false, "url": "https://pypi.org/pypi/in-toto/json"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 96, "longevity": 100, "rhythm": 50}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3754, "days_push": 28, "days_rel": 121, "gap_med": null, "n_releases_24m": 1}, "score": 81, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}