Expand description
Revocations list consumer — spec §7.4.1.
v1 ships the consumer-side types, monotonicity check, expiry check, and local cache. DSSE signature verification against the mur root key is deferred to V2 (no root key material exists in v1). The format is forward-compatible: a v1 consumer can parse and cache a v2-signed list, it just won’t enforce the signature yet.
Structs§
- Revocations
List - The signed revocations list fetched from
https://mur.run/revocations.json.
Enums§
- Revoked
Entry - A single revoked item — either a specific package or an entire author.