---
title: "Show the attestation statement for a specific package."
method: GET
path: "/v1/packages/{package_platform}/{package_name}/attestation-statement"
tags: ["Packages"]
---

# Show the attestation statement for a specific package.

`GET /v1/packages/{package_platform}/{package_name}/attestation-statement`

Show the attestation statement for a specific package

## Path parameters

- `package_platform` string, required
- `package_name` string, required

## Response `200`

Details of the package

- PackageAttestationStatement
  - `PackageName` string, required
  - `PackagePlatform` string, required
  - `PURL` string, required
  - `UpstreamRepositoryURL` string, required
  - `SPDXLicenseLatestRelease` string, required
  - `LatestStableRelease` string, required
  - `ReleasesInUse` string[], required
  - `SBOM` object[], required
    - `Type` string, required
    - `URL` string, required
    - `DigitalSignatureURL` string, required
  - `PackageManagerMFAEnabled` string, required
  - `SourceRepoMFAEnabled` string, required
  - `DocumentedBuildPractices` string, required
  - `KnownReleasesURL` string, required
  - `CleanReleaseAvailable` string, required
  - `FixedVulnerabilities` string, required
  - `DependenciesAreManaged` string, required
  - `KnownVulnerabilitiesURL` string, required
  - `PackageSecurityPolicyURL` string, required
  - `PackageSecurityContact` string, required
  - `SecurityResponsive` string, required
  - `MultipleMaintainers` string, required
  - `SuccessionPlan` string, required
  - `NoBinariesInRepository` string, required
  - `CodeReviewPractice` string, required
  - `FuzzingPractice` string, required
  - `ReleasesDigitallySigned` string
  - `SDLCPolicyURL` string, required
  - `SDLCEvidenceDataURL` string, required
  - `PackageStatus` object, required
    - `Status` string, required
    - `LastModifiedDateTimeUTC` string, date-time, required
  - `IncomeStreams` union, required
    - 'NOASSERTION'
    - object[]
      - `Type` string, required
      - `EvidenceURL` string, required
      - `LastModifiedDateTimeUTC` string, date-time, required

## Other responses

- `400` — Parameters specified are not correct, or the package is from an unsupported platform.
- `401` — Unauthorized
- `403` — 403 Forbidden
- `404` — Package not found

---

[API](https://skmtc.net/tidelift/apis/tidelift-external-api.md) · [All operations](https://skmtc.net/tidelift/apis/tidelift-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tidelift/tidelift-external-api/revisions/5f36bed372bb/schema)