Skip to main content

This python package provides one class, Notarizer, which is intended as a base class for a python object which automatically notarizes a signed macOS application bundle. The subclass which does the actual notarization needs to provide a method build_dmg which builds the disk image that will be used to distribute the app.

Apple’s notarization process involves a complex dance which is performed by this object. First the signed app is packaged in a disk image and sent to Apple for notarization. Then the notarization ticket is stapled to the app and the app is repackaged in a new disk image which is signed and sent to Apple for a second notarization. Finally the notarization ticket can be stapled to the disk image itself.

The credentials and parameters which are needed for the various notarization steps are provided in a config file which should be in the current directory and should have the following structure:

[developer]
username = <your app store id or email>
password = <your app-specific password>
identity = <the signing identity you used to sign your app>

[app]
app_name = <name of the app>
app_path = <path to the application bundle>
dmg_path = <path to the disk image that your build_dmg method will create>
bundle_id = <an (arbitrary) bundle identifier that you provide for the request>

This package is available from pypi:

pip install notabot

Metadata

Release files for notabot 2.0.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for notabot 2.0.2
File Size Uploaded Provenance
notabot-2.0.2.tar.gz 12.7 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for notabot 2.0.2
File Interpreter ABI Platform
notabot-2.0.2-py3-none-any.whl Python 3 none any Details

Total release size: 25.1 kB

Release files / notabot-2.0.2.tar.gz

Download URL notabot-2.0.2.tar.gz
Size 12.7 kB
Tags Source
SHA-256 checksum
How to use checksums
fcbb9cf2d394b45be1d4bed6fc82efed54a2a82e176fdfab1cb7ac94f042a2ab
BLAKE2b-256 checksum
How to use checksums
85ac5db726b84b44aca2943071caa0befc90d6fc3e0b85c28d1ff40332d00c69
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.0.1 CPython/3.13.1

Release files / notabot-2.0.2-py3-none-any.whl

Download URL notabot-2.0.2-py3-none-any.whl
Size 12.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
03cb8eaeca12b09c28588bde7a261f41284a875d70b4a7a6ec2dd500bd1d0407
BLAKE2b-256 checksum
How to use checksums
d17327bc26ca22e55fcbb17e964ff6d7be3c723e4dfa770e5156de939729708f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.0.1 CPython/3.13.1

Security for notabot 2.0.2

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page