tuf-on-a-plane

Allegedly, a minimal, Pythonic TUF client can be written on a long flight. This was written after that flight, but hey, it's a shot.

The idea is not necessarily to rewrite the TUF reference client from scratch, but to imagine what could be done when not encumbered by legacy code.

Features

• A "hypermodern" Python setup for packaging, testing, linting, typing, documentation, and CI/CD
• Everything is type-hinted
• Intermediate metadata representation a.k.a. models
• Recursive descent parsers for concrete metadata formats (e.g., JSON)
• Readable code that closely follows the specification
• Sessions for free: every client instance automatically downloads targets from the latest known consistent snapshot

Testimonials

• @SantiagoTorres "is ready for boringTUF and wolfTUF"