Is attest-protocol safe to use?

attest-protocol has no known vulnerabilities on the latest version (0.2.0). DepScope rates its health at 56/100 (high risk).

What is the latest version of attest-protocol?

The latest version of attest-protocol is 0.2.0, released 2026-03-31.

Does attest-protocol have known vulnerabilities?

No known vulnerabilities on the latest version of attest-protocol.

Is attest-protocol deprecated?

No, attest-protocol is actively maintained. Latest release: 0.2.0 (2026-03-31).

What are alternatives to attest-protocol?

Popular alternatives to attest-protocol in PyPI include: boto3, packaging, certifi, idna, urllib3.

What license does attest-protocol use?

attest-protocol is licensed under Apache-2.0.

attest-protocol

pypiv0.2.0

Python SDK for the Action Receipts protocol

License Apache-2.0permissive1 versions1 maintainers5 deps1 weekly dl

attest-protocol/attest-py

/ 100

Health

safe to use

[email protected] is safe to use (health: 56/100)

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Health History

Dependency Tree

License Audit

Dependencies (5)

cryptography pydantic pyright pytest ruff

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/attest-protocol