va-spec-python
VA-Spec-Python provides Python language support and a reference implementation for the GA4GH Variant Annotation Specification (VA-Spec).
Information
Releases
Development
Features
- Pydantic implementation of VA-Spec models
Known Issues
You are encouraged to browse issues. All known issues are listed there. Please report any issues you find.
Developers
This section is intended for developers who contribute to VA-Spec-Python.
Installing for development
Prerequisites
- Python >= 3.10
- Note: Python 3.12 is required for developers contributing to VA-Spec-Python
Fork the repo at https://github.com/ga4gh/va-spec-python/.
Install development dependencies and pre-commit:
git clone --recurse-submodules git@github.com:YOUR_GITHUB_ID/va-spec-python.git
cd va-spec-python
make devready
source venv/3.12/bin/activate
pre-commit install
Check style with ruff:
make format; make lint
Submodules
va-spec-python embeds va-spec as a submodule, only for testing purposes. When checking
out va-spec-python and switching branches, it is important to make sure that the
submodule tracks va-spec-python correctly. The recommended way to do this is
git config --global submodule.recurse true. If you don't set submodule.recurse,
developers and reviewers must be extremely careful to not accidentally upgrade or
downgrade schemas with respect to va-spec-python.
If you already cloned the repo, but forgot to include --recurse-submodules you can run:
git submodule update --init --recursive
Testing
To run tests:
make test
Security Note (from the GA4GH Security Team)
A stand-alone security review has been performed on the specification itself. This implementation is offered as-is, and without any security guarantees. It will need an independent security review before it can be considered ready for use in security-critical applications. If you integrate this code into your application it is AT YOUR OWN RISK AND RESPONSIBILITY to arrange for a security audit.
Metadata
Release files for ga4gh.va-spec 0.4.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| ga4gh_va_spec-0.4.4.tar.gz | 43.8 kB | With provenance | Details for ga4gh_va_spec-0.4.4.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| ga4gh_va_spec-0.4.4-py3-none-any.whl | Python 3 | none | any | Details for ga4gh_va_spec-0.4.4-py3-none-any.whl |
Total release size: 76.7 kB
Release files / ga4gh_va_spec-0.4.4.tar.gz
| Download URL | ga4gh_va_spec-0.4.4.tar.gz |
|---|---|
| Size | 43.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
73b755cd3ca5fa808d16ce447b753a83d03014a99804350fd6f3c50867c95958
|
|
BLAKE2b-256 checksum How to use checksums |
bcc59db36dd5b6db6bbbc2c9a9233efc5c80418590ddc1fadc7129f20086cd2d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 2, 2026.
Transparency logRelease files / ga4gh_va_spec-0.4.4-py3-none-any.whl
| Download URL | ga4gh_va_spec-0.4.4-py3-none-any.whl |
|---|---|
| Size | 32.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
5e763a50a1903a4e8bc30d40383ed339c4e846a13b9d35d926534b397b2899fa
|
|
BLAKE2b-256 checksum How to use checksums |
cc4ec889e3eff92753c179134416c5dbc388e7e6f4c5983b11a3065f070e72a9
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 2, 2026.
Transparency logSecurity for ga4gh.va-spec 0.4.4
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
Both files in this release have been uploaded with provenance metadata.
Attestation for ga4gh_va_spec-0.4.4.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 2, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.