capabilities.work

List evidence attached to a package

One step with JFrog. We can help you get access.

Look something up

List evidence attached to a package

with JFrog

Use JFrog: its Jfrog Evidence API lets you list evidence attached to a package in a single step (GET /v1/evidence/subject/package). capabilities.work can help you get signed up and connected.

  • What evidence is attached to a specific package version in a repository?
  • Can I check attestations on an npm or Maven package version?
Say it to your AI assistant
  • List evidence for package {package_name} version {package_version} in repo {repo_key}.
  • Show attestations on {package_name}@{package_version} stored in {repo_key}.
For your developer

GET /v1/evidence/subject/package in Jfrog Evidence API. Full spec on APIs.io.