amazon-ascs (placeholder)
This PyPI package name is a placeholder registered as proof of concept for a security report filed with Amazon's Vulnerability Research Program.
It is not affiliated with Amazon and it performs no operations. Installing it does not run any code, does not import anything at install time, and does not connect to any network endpoint.
Why does this exist?
At the time of registration, Amazon's ASCS Developer Portal at
https://developer.supplychain.amazon.com/ instructs external supply chain integrators to
run pip install amazon-ascs in its "Install the SDK" step, but Amazon had not registered
that name on public PyPI. Any first-come account could have claimed it and shipped arbitrary
code to every developer following those instructions. This placeholder was registered to
prevent that outcome while Amazon reviews the report and takes ownership of the name.
If you are an Amazon supply chain integrator
Do not use this package. It has no functionality. The official Amazon SDK, when Amazon publishes it, will come from an Amazon-owned PyPI account with real metadata and code. Please contact Amazon supply chain support for the official SDK.
For Amazon
This package name will be transferred to Amazon's ownership on request, at no cost.
1 maintainer
Metadata
1 maintainer
Release files for amazon-ascs 0.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| amazon_ascs-0.0.1.tar.gz | 2.0 kB | Without provenance | Details for amazon_ascs-0.0.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| amazon_ascs-0.0.1-py3-none-any.whl | Python 3 | none | any | Details for amazon_ascs-0.0.1-py3-none-any.whl |
Total release size: 4.3 kB
Release files / amazon_ascs-0.0.1.tar.gz
| Download URL | amazon_ascs-0.0.1.tar.gz |
|---|---|
| Size | 2.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
caa9f3e710539d72cf5dd05d725c5530c44307253b84580c858b2acc7e73c309
|
|
BLAKE2b-256 checksum How to use checksums |
618278676d5df675661d81155b89ce2ce3c4c34fdd3c0c99130368b1d1bc24a2
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.14.4
|
Release files / amazon_ascs-0.0.1-py3-none-any.whl
| Download URL | amazon_ascs-0.0.1-py3-none-any.whl |
|---|---|
| Size | 2.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f94d59037e11fc18a87dc2be51dc9f28b702d04116d0ca783b07b4e4f0b50830
|
|
BLAKE2b-256 checksum How to use checksums |
73b7f9a596b34c2d317c6e27bdadd3844b1cd4b523be9344754aa7b2a5f2bd77
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.14.4
|
Security for amazon-ascs 0.0.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
