v0.6.1-pypi — first PyPI release

First PyPI release. pip install crypto-key-classifier now works for anyone — no source clone required.

At a glance

shipped	2026-07-19
version	0.6.1
language	Python 3.10+
license	MIT
tests	239 (pytest + hypothesis fuzz)
chains	~50 across 17 validators

Highlights

First PyPI release — pip install crypto-key-classifier and you're running. README install section flipped to make PyPI the primary path; source clone moved under "Development install".

OIDC trusted publishing — release workflow (.github/workflows/release.yml) publishes to PyPI on signed v* tag push. No API tokens stored in repo secrets; PyPI trusts the workflow path + environment via OIDC. One-time setup at pypi.org → Account settings → Publishing → Add publisher.

Matrix CI — Ruff + Pytest across Python 3.10 / 3.11 / 3.12 on every push and PR. Pyright is advisory on CI (the project's quality bar is strict mode on the dev box).

PyPI metadata populated — classifiers and [project.urls] blocks in pyproject.toml filled so the registry page shows topics, license, supported Python versions, and links to repo / changelog / issues.

Install

pip install crypto-key-classifier
classify-key --help

Verify the signature

This repo follows the 3-layer signature pattern (see SIGNATURE.md).

# Layer 2 — runtime signature
python -c "import ckc; print(ckc.__signature__)"
# → 'jn/crypto-key-classifier@0.6.1'

# Layer 3 — git signature (tag is GPG-signed with Ed25519)
git verify-tag v0.6.1-pypi

Changelog

See CHANGELOG.md for full history v0.1.0-mvp → v0.6.1-pypi.