This python package provides one class, Notarizer, which is intended as a base class for a python object which automatically notarizes a signed macOS application bundle. The subclass which does the actual notarization needs to provide a method build_dmg which builds the disk image that will be used to distribute the app.
Apple’s notarization process involves a complex dance which is performed by this object. First the signed app is packaged in a disk image and sent to Apple for notarization. Then the notarization ticket is stapled to the app and the app is repackaged in a new disk image which is signed and sent to Apple for a second notarization. Finally the notarization ticket can be stapled to the disk image itself.
The credentials and parameters which are needed for the various notarization steps are provided in a config file which should be in the current directory and should have the following structure:
[developer]
username = <your app store id or email>
password = <your app-specific password>
identity = <the signing identity you used to sign your app>
[app]
app_name = <name of the app>
app_path = <path to the application bundle>
dmg_path = <path to the disk image that your build_dmg method will create>
bundle_id = <an (arbitrary) bundle identifier that you provide for the request>
This package is available from pypi:
pip install notabot
Metadata
Release files for notabot 2.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| notabot-2.0.2.tar.gz | 12.7 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| notabot-2.0.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 25.1 kB
Release files / notabot-2.0.2.tar.gz
| Download URL | notabot-2.0.2.tar.gz |
|---|---|
| Size | 12.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
fcbb9cf2d394b45be1d4bed6fc82efed54a2a82e176fdfab1cb7ac94f042a2ab
|
|
BLAKE2b-256 checksum How to use checksums |
85ac5db726b84b44aca2943071caa0befc90d6fc3e0b85c28d1ff40332d00c69
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.0.1 CPython/3.13.1
|
Release files / notabot-2.0.2-py3-none-any.whl
| Download URL | notabot-2.0.2-py3-none-any.whl |
|---|---|
| Size | 12.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
03cb8eaeca12b09c28588bde7a261f41284a875d70b4a7a6ec2dd500bd1d0407
|
|
BLAKE2b-256 checksum How to use checksums |
d17327bc26ca22e55fcbb17e964ff6d7be3c723e4dfa770e5156de939729708f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.0.1 CPython/3.13.1
|
Security for notabot 2.0.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.