signify

library0.9.2pypypiunverified

signify is a Python library for generating and verifying Portable Executable (PE) digital signatures. The current version is 0.9.2. It requires Python >=3.9. The library provides tools to sign PE files and verify existing signatures, primarily for Windows executables. Release cadence is low; updates are infrequent.

auth-security serialization

pip install signify

github ↗package ↗docs ↗changelog ↗

INSTALL

IMPORT

SIG · SIGNIFY

signify

auth-securitypythonv0.9.2

Install

2.0s avg

Import

—

Disk

21MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v0.9.2 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 0.000s · 23.1MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 2.0s · import 0.000s · 24MB

21MB installed

● package 21MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

sign

✓ from signify import sign

✗ from signify import sign

verify

✓ from signify import verify

✗ from signify import verify

cast

✓ from signify import cast

✗ from signify import cast

Signs a PE file using a PFX certificate and verifies the signature.

from signify import sign, verify # Sign a PE file sign('path/to/file.exe', 'path/to/certificate.pfx', 'password') # Verify a signature result = verify('path/to/signed.exe') print(result)

Debug

Known issues

breakingThe library requires Python >=3.9 and may not work on older versions.

fix

Upgrade Python to 3.9 or later.

affects: <0.9.0

gotchaThe signing function 'sign' expects a PFX file path and password. For other formats, manual conversion is needed.

fix

Ensure your certificate is in PFX format. Use OpenSSL to convert if needed.

affects: all

gotchaVerification may fail on files without a signature block; check that the file indeed has a PE signature.

fix

Use 'pefile' library to inspect PE structure before verification.

affects: all

Upgrade

Version history

0.9.2latest on PyPI · released Dec 31, 2025

Audit

Dependencies

No dependency data recorded yet.

Agent activity

40 hits · last 30 days

node

Anthropic

OpenAI (training)

Resources

githubhttps://github.com/ralphje/signify ↗

packagehttps://pypi.org/project/signify/ ↗

docshttp://signify.readthedocs.io/en/latest/ ↗

changeloghttps://signify.readthedocs.io/en/latest/changelog.html ↗