Debian 12 (Bookworm) native package

golang-github-theupdateframework-go-tuf-dev

Securing software in golang (library)

Packages / Debian 12 (Bookworm) / golang / golang-github-theupdateframework-go-tuf-dev

[Source: golang-github-theupdateframework-go-tuf]

Package: golang-github-theupdateframework-go-tuf-dev (0.5.2-5~bpo12+1)

[Project overview: golang-github-theupdateframework-go-tuf]

Maintainers:

Debian Go Packaging Team

External Resources:

Homepage: [github.com]

Securing software in golang (library)

Other Packages Related to golang-github-theupdateframework-go-tuf-dev:

dep: [golang-github-dustin-go-humanize-dev]
format units to human friendly sizes (Go library)
dep: [golang-github-docopt-docopt-go-dev]
Implementation of docopt in the Go programming language
dep: [golang-github-golang-leveldb-dev]
Implementation of the LevelDB key/value database in Go
dep: [golang-github-google-gofuzz-dev]
Fuzz testing for Go
dep: [golang-github-secure-systems-lab-go-securesystemslib-dev]
Cryptographic routines for Golang Secure Systems Lab projects at NYU (library)
dep: [golang-github-stretchr-testify-dev]
sacred extension to the standard Go testing package
dep: [golang-github-syndtr-goleveldb-dev]
LevelDB key/value database in Go
dep: [golang-golang-x-crypto-dev]
Bibliothèques cryptographiques Go supplémentaires
dep: [golang-golang-x-term-dev]
prise en charge du terminal et de la console en Go (bibliothèque)
dep: [golang-gopkg-check.v1-dev]
Rich testing extension for Go's testing package

Download golang-github-theupdateframework-go-tuf-dev

Architecture	Package Size	Installed Size	Files
all	154 KiB	3.9 MiB	[list of files]

Chemins de fichiers du paquet (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 12 (Bookworm) backports main amd64 revision bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6

Utiliser ce paquet

OpenFactory peut démarrer ce système d'exploitation dans une machine virtuelle du navigateur, ou lancer une construction qui inclut le nom natif du paquet de cet enregistrement.

Essayer Debian 12 (Bookworm) dans le navigateur Construire une image qui inclut golang-github-theupdateframework-go-tuf-dev

Versions, suites et dépôts

Chaque ligne est une métadonnée d'index pour une version, une architecture, une suite et un dépôt. Noms, URL et tailles viennent de la source ; un lien est un emplacement de récupération mutable, pas une redistribution OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
0.5.2-5~bpo12+1	bookworm-backports / main	all	Debian 12 backports · main · amd64	154 KiB	3.9 MiB	pool/main/g/golang-github-theupdateframework-go-tuf/golang-github-theupdateframework-go-tuf-dev_0.5.2-5~bpo12+1_all.deb
0.5.2-5~bpo12+1	bookworm-backports / main	all	Debian 12 backports · main · arm64	154 KiB	3.9 MiB	pool/main/g/golang-github-theupdateframework-go-tuf/golang-github-theupdateframework-go-tuf-dev_0.5.2-5~bpo12+1_all.deb

Field source: Debian 12 (Bookworm) backports main amd64 revision bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6

Empreintes et dates d'observation

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

0.5.2-5~bpo12+1 / allObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: ce198ea0dfeb57a4235eb7aa23e260756778d43a1ba6afa0323a995f565775eb

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'ce198ea0dfeb57a4235eb7aa23e260756778d43a1ba6afa0323a995f565775eb' 'golang-github-theupdateframework-go-tuf-dev_0.5.2-5~bpo12+1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 12 (Bookworm) backports main amd64 revision bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6

0.5.2-5~bpo12+1 / allObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: ce198ea0dfeb57a4235eb7aa23e260756778d43a1ba6afa0323a995f565775eb

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'ce198ea0dfeb57a4235eb7aa23e260756778d43a1ba6afa0323a995f565775eb' 'golang-github-theupdateframework-go-tuf-dev_0.5.2-5~bpo12+1_all.deb' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Debian 12 (Bookworm) backports main arm64 revision bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5

Complétude de la fiche

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 0/15
Homepage: 5/5
License text: 0/5
Source package or maintainer: 10/10

Recorded total: 80/100

Field source: Debian 12 (Bookworm) backports main amd64 revision bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6, Debian 12 (Bookworm) backports main arm64 revision bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources et provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

Debian 12 (Bookworm) backports main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Signed-object SHA-256
43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: main/binary-amd64/Packages.xz
Expected SHA-256: b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Observed SHA-256: b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Result: match verified
Debian 12 (Bookworm) backports main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Signed-object SHA-256
43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: main/binary-arm64/Packages.xz
Expected SHA-256: 9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Observed SHA-256: 9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Result: match verified