Project developers use `pip install tuf[tools]`, which installs PyNaCl.  Generating ed25519 keys and signature in pure Python is unsafe and should only be used for testing.