in-toto (pypi): A framework to define and secure the integrity of software supply chains
Keywords: security|software|supply chain|new-york-university|secure-systems-lab|supply-chain