
Product
Introducing Socket Fix for Safe, Automated Dependency Upgrades
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.
The c2pa-python repository implements Python bindings for the Content Authenticity Initiative (CAI) SDK. It enables you to read and validate C2PA manifest data from and add signed manifests to media files in supported formats.
NOTE: Starting with version 0.5.0, this package has a completely different API from version 0.4.0. See Release notes for more information.
WARNING: This is an prerelease version of this library. There may be bugs and unimplemented features, and the API is subject to change.
Additional documentation:
Install from PyPI by entering this command:
pip install -U c2pa-python
This is a platform wheel built with Rust that works on Windows, macOS, and most Linux distributions (using manylinux). If you need to run on another platform, see Project contributions - Development for information on how to build from source.
Determine what version you've got by entering this command:
pip list | grep c2pa-python
If the version shown is lower than the most recent version, then update by reinstalling.
If you tried unsuccessfully to install this package before the 0.40 release, then use this command to reinstall:
pip install --upgrade --force-reinstall c2pa-python
The Python library supports the same media file formats as the Rust library.
This package is distributed under the terms of both the MIT license and the Apache License (Version 2.0).
Note that some components and dependent crates are licensed under different terms; please check the license terms for each crate and component for details.
We welcome contributions to this project. For information on contributing, providing feedback, and about ongoing work, see Contributing.
FAQs
Python bindings for the C2PA Content Authenticity Initiative (CAI) library
We found that c2pa-python demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.
Security News
CISA denies CVE funding issues amid backlash over a new CVE foundation formed by board members, raising concerns about transparency and program governance.
Product
We’re excited to announce a powerful new capability in Socket: historical data and enhanced analytics.