amazon-ascs 0.0.1__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,43 @@
1
+ Metadata-Version: 2.4
2
+ Name: amazon-ascs
3
+ Version: 0.0.1
4
+ Summary: Placeholder registered as proof-of-concept for a security report filed with Amazon's Vulnerability Research Program. Not affiliated with Amazon. Performs no operations.
5
+ License: MIT
6
+ Project-URL: Homepage, https://developer.supplychain.amazon.com/
7
+ Keywords: placeholder,security-poc,avrp
8
+ Classifier: Development Status :: 7 - Inactive
9
+ Classifier: Intended Audience :: Developers
10
+ Classifier: License :: OSI Approved :: MIT License
11
+ Classifier: Operating System :: OS Independent
12
+ Classifier: Programming Language :: Python :: 3
13
+ Classifier: Topic :: Security
14
+ Requires-Python: >=3.7
15
+ Description-Content-Type: text/markdown
16
+
17
+ # amazon-ascs (placeholder)
18
+
19
+ This PyPI package name is a placeholder registered as proof of concept for a security report
20
+ filed with Amazon's Vulnerability Research Program.
21
+
22
+ It is **not affiliated with Amazon** and it performs **no operations**. Installing it does
23
+ not run any code, does not import anything at install time, and does not connect to any
24
+ network endpoint.
25
+
26
+ ## Why does this exist?
27
+
28
+ At the time of registration, Amazon's ASCS Developer Portal at
29
+ `https://developer.supplychain.amazon.com/` instructs external supply chain integrators to
30
+ run `pip install amazon-ascs` in its "Install the SDK" step, but Amazon had not registered
31
+ that name on public PyPI. Any first-come account could have claimed it and shipped arbitrary
32
+ code to every developer following those instructions. This placeholder was registered to
33
+ prevent that outcome while Amazon reviews the report and takes ownership of the name.
34
+
35
+ ## If you are an Amazon supply chain integrator
36
+
37
+ Do not use this package. It has no functionality. The official Amazon SDK, when Amazon
38
+ publishes it, will come from an Amazon-owned PyPI account with real metadata and code.
39
+ Please contact Amazon supply chain support for the official SDK.
40
+
41
+ ## For Amazon
42
+
43
+ This package name will be transferred to Amazon's ownership on request, at no cost.
@@ -0,0 +1,27 @@
1
+ # amazon-ascs (placeholder)
2
+
3
+ This PyPI package name is a placeholder registered as proof of concept for a security report
4
+ filed with Amazon's Vulnerability Research Program.
5
+
6
+ It is **not affiliated with Amazon** and it performs **no operations**. Installing it does
7
+ not run any code, does not import anything at install time, and does not connect to any
8
+ network endpoint.
9
+
10
+ ## Why does this exist?
11
+
12
+ At the time of registration, Amazon's ASCS Developer Portal at
13
+ `https://developer.supplychain.amazon.com/` instructs external supply chain integrators to
14
+ run `pip install amazon-ascs` in its "Install the SDK" step, but Amazon had not registered
15
+ that name on public PyPI. Any first-come account could have claimed it and shipped arbitrary
16
+ code to every developer following those instructions. This placeholder was registered to
17
+ prevent that outcome while Amazon reviews the report and takes ownership of the name.
18
+
19
+ ## If you are an Amazon supply chain integrator
20
+
21
+ Do not use this package. It has no functionality. The official Amazon SDK, when Amazon
22
+ publishes it, will come from an Amazon-owned PyPI account with real metadata and code.
23
+ Please contact Amazon supply chain support for the official SDK.
24
+
25
+ ## For Amazon
26
+
27
+ This package name will be transferred to Amazon's ownership on request, at no cost.
@@ -0,0 +1,5 @@
1
+ """amazon-ascs — placeholder registered as proof of concept for a security report filed
2
+ with Amazon's Vulnerability Research Program. Not affiliated with Amazon. Performs no
3
+ operations. See README for details."""
4
+
5
+ __version__ = "0.0.1"
@@ -0,0 +1,43 @@
1
+ Metadata-Version: 2.4
2
+ Name: amazon-ascs
3
+ Version: 0.0.1
4
+ Summary: Placeholder registered as proof-of-concept for a security report filed with Amazon's Vulnerability Research Program. Not affiliated with Amazon. Performs no operations.
5
+ License: MIT
6
+ Project-URL: Homepage, https://developer.supplychain.amazon.com/
7
+ Keywords: placeholder,security-poc,avrp
8
+ Classifier: Development Status :: 7 - Inactive
9
+ Classifier: Intended Audience :: Developers
10
+ Classifier: License :: OSI Approved :: MIT License
11
+ Classifier: Operating System :: OS Independent
12
+ Classifier: Programming Language :: Python :: 3
13
+ Classifier: Topic :: Security
14
+ Requires-Python: >=3.7
15
+ Description-Content-Type: text/markdown
16
+
17
+ # amazon-ascs (placeholder)
18
+
19
+ This PyPI package name is a placeholder registered as proof of concept for a security report
20
+ filed with Amazon's Vulnerability Research Program.
21
+
22
+ It is **not affiliated with Amazon** and it performs **no operations**. Installing it does
23
+ not run any code, does not import anything at install time, and does not connect to any
24
+ network endpoint.
25
+
26
+ ## Why does this exist?
27
+
28
+ At the time of registration, Amazon's ASCS Developer Portal at
29
+ `https://developer.supplychain.amazon.com/` instructs external supply chain integrators to
30
+ run `pip install amazon-ascs` in its "Install the SDK" step, but Amazon had not registered
31
+ that name on public PyPI. Any first-come account could have claimed it and shipped arbitrary
32
+ code to every developer following those instructions. This placeholder was registered to
33
+ prevent that outcome while Amazon reviews the report and takes ownership of the name.
34
+
35
+ ## If you are an Amazon supply chain integrator
36
+
37
+ Do not use this package. It has no functionality. The official Amazon SDK, when Amazon
38
+ publishes it, will come from an Amazon-owned PyPI account with real metadata and code.
39
+ Please contact Amazon supply chain support for the official SDK.
40
+
41
+ ## For Amazon
42
+
43
+ This package name will be transferred to Amazon's ownership on request, at no cost.
@@ -0,0 +1,7 @@
1
+ README.md
2
+ pyproject.toml
3
+ amazon_ascs/__init__.py
4
+ amazon_ascs.egg-info/PKG-INFO
5
+ amazon_ascs.egg-info/SOURCES.txt
6
+ amazon_ascs.egg-info/dependency_links.txt
7
+ amazon_ascs.egg-info/top_level.txt
@@ -0,0 +1 @@
1
+ amazon_ascs
@@ -0,0 +1,23 @@
1
+ [build-system]
2
+ requires = ["setuptools>=61", "wheel"]
3
+ build-backend = "setuptools.build_meta"
4
+
5
+ [project]
6
+ name = "amazon-ascs"
7
+ version = "0.0.1"
8
+ description = "Placeholder registered as proof-of-concept for a security report filed with Amazon's Vulnerability Research Program. Not affiliated with Amazon. Performs no operations."
9
+ readme = "README.md"
10
+ license = { text = "MIT" }
11
+ requires-python = ">=3.7"
12
+ keywords = ["placeholder", "security-poc", "avrp"]
13
+ classifiers = [
14
+ "Development Status :: 7 - Inactive",
15
+ "Intended Audience :: Developers",
16
+ "License :: OSI Approved :: MIT License",
17
+ "Operating System :: OS Independent",
18
+ "Programming Language :: Python :: 3",
19
+ "Topic :: Security",
20
+ ]
21
+
22
+ [project.urls]
23
+ Homepage = "https://developer.supplychain.amazon.com/"
@@ -0,0 +1,4 @@
1
+ [egg_info]
2
+ tag_build =
3
+ tag_date = 0
4
+