Is model-signing safe to use?

model-signing has no known vulnerabilities on the latest version (1.1.1). DepScope rates its health at 50/100 (high risk).

What is the latest version of model-signing?

The latest version of model-signing is 1.1.1, released 2025-10-10.

Does model-signing have known vulnerabilities?

No known vulnerabilities on the latest version of model-signing.

Is model-signing deprecated?

No, model-signing is actively maintained. Latest release: 1.1.1 (2025-10-10).

What are alternatives to model-signing?

Popular alternatives to model-signing in PyPI include: boto3, packaging, urllib3, idna, requests.

What license does model-signing use?

model-signing is licensed under Apache-2.0.

model-signing

pypiv1.1.1

A tool for signing and verifying ML models

License Apache-2.0permissive11 versions15 deps1,851 weekly dl

sigstore/model-transparency

/ 100

Health

use with caution

[email protected] low health (50/100) — consider alternatives

Moderate health score (50/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

6/20

popularity

25/25

security

9/15

maturity

0/15

community

Vulnerabilities

none known

Health History

Dependency Tree

License Audit

Dependencies (15)

asn1crypto blake3 click cryptography in-toto-attestation sigstore-models sigstore typing-extensions opentelemetry-api;opentelemetry-distro;opentelemetry-exporter-otlp;opentelemetry-instrumentation;opentelemetry-instrumentation-urllib3;opentelemetry-sdk;pykcs11;

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/model-signing