Merhaba: Digital attestation of software packages is an important task. Please see overview at
https://docs.pypi.org/attestations/ PyPi's implementation of digital attestations is documented in PEP740 https://peps.python.org/pep-0740/ Let's try to understand this and have a discussion on the important points on this mailing list. warm regards Saifi.