theupdateframework/python-tuf
Python reference implementation of The Update Framework (TUF) observed · 2026-08-28
Health v2 · maintenance only
83/100
- Activity 99
- Release rhythm 52
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 293.0
- age_days: 4962
- days_rel: 107
- days_push: 8
- n_releases_24m: 3
Adoption not part of the score
1724 stars · 302 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Python reference implementation of The Update Framework (TUF), a CNCF-graduated specification for securing software update systems against repository and key compromise. It provides a low-level metadata API, a client updater library, and a repository library for creating and verifying signed TUF metadata.
Use cases
- secure software update system against key compromise
- add TUF metadata signing to a package repository
- implement a TUF-compliant update client in Python
- protect against supply chain attacks on content delivery
- rotate signing keys and revoke compromised keys safely
- verify downloaded artifacts before installing updates
When to choose
- you need a battle-tested, spec-conformant TUF implementation in Python
- you are building an application updater or package manager that must resist repository or key compromise
- you want a readable reference for implementing TUF in another language
When to avoid
- you need a turnkey update server or signing service rather than a library
- your updater has no threat model beyond simple HTTPS downloads
- you need a TUF implementation in Go, Rust, or JavaScript instead
Facets
library · maturity stable
security cryptography sdk serialization security developer-tools python cross-platform tuf software-updates supply-chain-security key-rotation metadata-signing cncf secure-content-delivery cryptography automation
8 sources
- readme: https://github.com/theupdateframework/python-tuf · fetched 2026-08-28 · d5ae426b9a1b
- homepage: https://theupdateframework.com/ · fetched 2026-08-29 · bec5a6fce306
- site_page: https://theupdateframework.com/docs/contributing · fetched 2026-08-29 · bd28c4fe6d74
- site_page: https://theupdateframework.com/docs/getting-started · fetched 2026-08-29 · 8dca18961249
- site_page: https://theupdateframework.com/about · fetched 2026-08-29 · cf8d963ce2a8
- site_page: https://theupdateframework.com/docs · fetched 2026-08-29 · 341f99d0e491
- site_page: https://theupdateframework.com/docs/overview · fetched 2026-08-29 · 378eb6c81f81
- site_page: https://theupdateframework.com/docs/project/funding · fetched 2026-08-29 · a72149300475
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| theupdateframework/python-tuf | main | 83 |
For agents
markdown · JSON · MCP: product_card(name="theupdateframework/python-tuf")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem