Metadata-Version: 2.4
Name: ossentinel-core
Version: 1.0.0
Summary: Core shared library for the Vigil compliance toolkit
Project-URL: Homepage, https://github.com/schmidtpeterdaniel/vigil
Project-URL: Documentation, https://vigil.readthedocs.io
Project-URL: Repository, https://github.com/schmidtpeterdaniel/vigil
Project-URL: Issues, https://github.com/schmidtpeterdaniel/vigil/issues
Author-email: Schmidt Peter Daniel <peterschmidt5575@gmail.com>
License: Apache-2.0
Keywords: compliance,license,sbom,security,supply-chain
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.9
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Libraries
Requires-Python: >=3.9
Requires-Dist: httpx>=0.27.0
Requires-Dist: platformdirs>=4.0.0
Requires-Dist: pydantic>=2.0.0
Provides-Extra: dev
Requires-Dist: mypy>=1.10.0; extra == 'dev'
Requires-Dist: pytest-asyncio>=0.23.0; extra == 'dev'
Requires-Dist: pytest-cov>=5.0.0; extra == 'dev'
Requires-Dist: pytest>=8.0.0; extra == 'dev'
Requires-Dist: pyyaml>=6.0; extra == 'dev'
Requires-Dist: ruff>=0.4.0; extra == 'dev'
Description-Content-Type: text/markdown

# 🛡️ Vigil-core

> **Open source compliance, automated.**

Vigil is a modular Python toolkit for software supply chain compliance — license conflict detection, SBOM generation, policy enforcement, and dependency health scoring. Built for developers, trusted by OSPOs.

---

## Why Vigil?

- 🇪🇺 **EU Cyber Resilience Act** mandates SBOMs for software sold in Europe
- 🔒 **US EO 14028** requires supply chain transparency for federal software
- 🧩 Existing tools are fragmented, hard to configure, and don't talk to each other

Vigil brings it all under one roof — installable piece by piece, or all at once.

---

| `vigil-core` | Shared license DB, SBOM parsing, CVE feeds | [![PyPI](https://img.shields.io/pypi/v/vigil-core)](https://pypi.org/project/vigil-core) |

## Contributing

Vigil-core is Apache 2.0 licensed and welcomes contributions. See [CONTRIBUTING.md](CONTRIBUTING.md).

---

## License

Apache-2.0 © Vigil Contributors
