Post #1834553
2026-03-28 02:51 UTC
@jni @saucoide I wouldn't expect pip to have it as its pylock.toml support is basically a fancy `pip freeze` and this info isn't recorded at install time. As for PDM and uv, if you verified a project on PyPI has the requisite data then they haven't added support for digital attestations.
Replies (1)
-
@saucoide@fosstodon.org 2026-03-28 11:00
@brettcannon @jni yes I was trying to replicate it with the `packaging` example, but it does looks like the tooling doesn't support it yet: https://github.com/astral-sh/uv/issues/9122