Maya Costantini

Integrate Sigstore to verify package provenance

10

**Is your feature request related to a problem? Please describe.** As a user of micropipenv, I would like to be able to verify the provenance of packages I install using...

`installer.sh` fails to recognize when Python packages were not installed

2

# Environment * OS / version: RHEL 8.6 * Python version: 3.10.0 # Description The `installer.sh` script does not recognize when some Python packages were not installed properly. For example,...

Monitor indexes with forbidden access

3

**Is your feature request related to a problem? Please describe.** Related to https://github.com/thoth-station/solver/issues/5221 Register a Prometheus metric to monitor indexes sending back a 403 error when trying to get packages...

[Spike] Scale OSSF Scorecards prescriptions out of GitHub for aggregation by revision

2

**Is your feature request related to a problem? Please describe.** As we will start aggregating Scorecards prescriptions by project repository revision as present in the new `scorecards-v2` BigQuery dataset and...

Create prescriptions for "critical" PyPI projects

1

**Is your feature request related to a problem? Please describe.** Create prescriptions for projects hosted on PyPI and designed as "critical". Maintainers of those projects will be required to enable...

Aggregate Scorecards metrics on a new package release

3

This issue is part of the following **EPIC**: https://github.com/thoth-station/core/issues/434 **_2. Compute metrics for packages present in Thoth's database that will serve as a basis for a global software stack quality...

[EPIC] [MVP] Improvements to Thoth advises output

5

## Problem statement As a Python Developer, I would like to have concise information about the quality of my software stack and all its transitive dependencies, so that I get...

[Spike] [MVP] Package maintenance predictive model

2

## Problem statement > **_While most approaches focus on guaranteeing the provenance of software components, this is only one side of sustainable software development. One other side is the focus...

Create short, entry-level Thoth tutorials

4

## Problem statement As a potential user of Thoth, I would be interested in short, entry-level tutorials to learn: - How to use the different entry points to get advises...

Create a concise documentation on how adviser works

8

**Is your feature request related to a problem? Please describe.** As a user of Thoth, I would like to have access to a document which summarizes the mechanism behind Thoth...