Class: SlsaPackageRegistry

A distribution platform that resolves package names to immutable package artifacts within an ecosystem.

URI: slsa:SlsaPackageRegistry

 classDiagram
    class SlsaPackageRegistry
    click SlsaPackageRegistry href "../SlsaPackageRegistry/"
      SlsaPackageRegistry : ecosystem
        
      SlsaPackageRegistry : registry_uri
        
      

Slots

Name	Cardinality and Range	Description	Inheritance
ecosystem	0..1 String	The package ecosystem whose rules govern how a package is named and distribut…	direct
registry_uri	1 Uri	The URI that identifies the registry	direct

Usages

used by	used in	type	used
SlsaDocument	package_registries	range	SlsaPackageRegistry
SlsaPackage	registry	range	SlsaPackageRegistry

In Subsets

• slsa_build_track
• slsa_dependency_track

See Also

• https://slsa.dev/spec/v1.2/terminology#distribution-model

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/slsa

Mappings

Mapping Type	Mapped Value
self	slsa:SlsaPackageRegistry
native	slsa:SlsaPackageRegistry

LinkML Source

Direct

name: SlsaPackageRegistry
description: A distribution platform that resolves package names to immutable package
  artifacts within an ecosystem.
in_subset:
- slsa_build_track
- slsa_dependency_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/v1.2/terminology#distribution-model
slots:
- ecosystem
attributes:
  registry_uri:
    name: registry_uri
    description: The URI that identifies the registry.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    identifier: true
    domain_of:
    - SlsaPackageRegistry
    range: uri

Induced

name: SlsaPackageRegistry
description: A distribution platform that resolves package names to immutable package
  artifacts within an ecosystem.
in_subset:
- slsa_build_track
- slsa_dependency_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/v1.2/terminology#distribution-model
attributes:
  registry_uri:
    name: registry_uri
    description: The URI that identifies the registry.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    identifier: true
    owner: SlsaPackageRegistry
    domain_of:
    - SlsaPackageRegistry
    range: uri
    required: true
  ecosystem:
    name: ecosystem
    description: The package ecosystem whose rules govern how a package is named and
      distributed, such as PyPA, npm or OCI.
    comments:
    - One ecosystem's tools can name the same package differently, which the study
      found affects attestations and provenance, so verifiers match provenance to
      package names with care (Tamanna et al., 2024, UR.1).
    in_subset:
    - slsa_build_track
    - slsa_dependency_track
    from_schema: https://w3id.org/lmodel/slsa
    rank: 1000
    slot_uri: slsa:ecosystem
    owner: SlsaPackageRegistry
    domain_of:
    - SlsaPackageRegistry
    - SlsaPackage
    range: string