GitHub repository: trailofbits/pip-plugin-pep740
Primary language: Python
Description: An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.