A Golang library to verify NPM and PyPI sigstore attestations. - View it on GitHub