Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
python-tuf/tuf/ngclient
History
1seal c49bdb9322 feat(ngclient): require explicit bootstrap argument 
make bootstrap required and explicit: callers must pass bootstrap=<root_bytes> or bootstrap=None.

also tighten docs, examples, and tests to reflect the explicit trust anchor choice.

Signed-off-by: 1seal <security@1seal.org>
2026-01-25 11:58:09 +00:00
..
_internal Make linter happy after python upgrade 2026-01-08 13:08:53 +02:00
__init__.py Move fetchers around to make them public 2025-02-14 17:42:45 +02:00
config.py Fix typos 2025-03-10 22:06:30 +01:00
fetcher.py update python annotations 2024-11-03 23:21:23 -05:00
README.md Improve README 2021-07-05 10:45:19 +03:00
requests_fetcher.py ngclient: Add note about RequestsFetcher being deprecated 2025-02-15 09:57:06 +02:00
updater.py feat(ngclient): require explicit bootstrap argument 2026-01-25 11:58:09 +00:00
urllib3_fetcher.py ngclient: Add proxy environment variable handling 2025-02-20 10:56:23 +02:00

README.md

Next-gen TUF client for Python

This package provides modules for TUF client implementers.

tuf.ngclient.Updater is a class that implements the client workflow described in the TUF specification (see https://theupdateframework.github.io/specification/latest/#detailed-client-workflow)

tuf.ngclient.FetcherInterface is an abstract class that client implementers can implement a concrete class of in order to reuse their own networking/download libraries -- a Requests-based implementation is used by default.

This package:

  • Aims to be a clean, easy-to-validate reference client implementation written in modern Python
  • At the same time aims to be the library of choice for anyone implementing a TUF client in Python: light-weight, easy to integrate and with minimal required dependencies
  • Is still under development but is planned to become the default client in this implementation (i.e., the older tuf.client will be deprecated in the future)