An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails. - View it on GitHub