The open-source compliance engine for EU Digital Product Passports
Installation • Quick Start • Features • Documentation • Contributing
dppvalidator is a Python library for validating Digital Product Passports (DPP) according to EU ESPR regulations and UNTP standards.
Starting 2027, every textile and apparel product sold in the EU must have a Digital Product Passport. This library ensures your DPP data is compliant before it hits production — saving fashion brands from costly compliance failures and enabling seamless integration with the circular economy.
| Challenge | Solution |
|---|---|
| Complex JSON Schema validation | Seven-layer validation catches errors at schema, model, semantic, JSON-LD, vocabulary, plugin, and signature levels |
| Evolving UNTP specifications | Built-in schema support for UNTP DPP 0.6.1 with easy version switching |
| Integration with existing systems | CLI + Python API for pipelines, CI/CD, and application integration |
| Custom business rules | Plugin system for domain-specific validators and exporters |
| Interoperability requirements | JSON-LD export for W3C Verifiable Credentials compliance |
# Using uv (recommended)
uv add dppvalidator
# With CLI extras (rich formatting)
uv add "dppvalidator[cli]"
# Or using pip
pip install dppvalidator
pip install "dppvalidator[cli]" # with CLI extras
For SHACL validation against official CIRPASS-2 shapes:
# Using uv (recommended)
uv add "dppvalidator[rdf]"
# Or using pip
pip install "dppvalidator[rdf]"from dppvalidator.validators import ValidationEngine
# Enable SHACL validation (requires [rdf] extra)
engine = ValidationEngine(enable_shacl=True)
result = engine.validate(dpp_data)JSON-LD validation is included by default (via pyld):
engine = ValidationEngine(validate_jsonld=True)
result = engine.validate(dpp_data)Signature verification is included by default (via cryptography):
engine = ValidationEngine(verify_signatures=True)
result = engine.validate(dpp_data)Note:
pyldandcryptographyare core dependencies installed automatically. Only[rdf](for SHACL via rdflib/pyshacl) and[cli](for rich formatting) are true optional extras.
Requirements: Python 3.10+
from dppvalidator.validators import ValidationEngine
engine = ValidationEngine()
result = engine.validate(
{
"id": "https://example.com/dpp/battery-001",
"type": ["DigitalProductPassport", "VerifiableCredential"],
"issuer": {
"id": "https://example.com/manufacturer",
"name": "Acme Battery Co.",
},
"credentialSubject": {
"id": "https://example.com/product/battery-001",
"product": {
"name": "EV Battery Pack",
"description": "High-capacity lithium-ion battery",
},
},
}
)
if result.valid:
print(f"✓ Valid in {result.validation_time_ms:.2f}ms")
else:
for error in result.errors:
print(f"✗ [{error.code}] {error.path}: {error.message}")# Validate a DPP file
dppvalidator validate passport.json
# Strict mode - warnings become errors
dppvalidator validate passport.json --strict
# Export to JSON-LD (W3C Verifiable Credential format)
dppvalidator export passport.json --format jsonld --output passport.jsonld
# Display schema information
dppvalidator schema --version 0.6.1
from dppvalidator.models import DigitalProductPassport, CredentialIssuer
from dppvalidator.exporters import JSONLDExporter
passport = DigitalProductPassport(
id="https://example.com/dpp/product-001",
issuer=CredentialIssuer(
id="https://example.com/issuer", name="Sustainable Textiles Ltd."
),
)
exporter = JSONLDExporter()
jsonld_output = exporter.export(passport)
# Ready for W3C Verifiable Credentials ecosystemflowchart TD
subgraph Input
A[/"📄 Input Data (JSON)"/]
end
subgraph Layer0["Layer 0: Schema Detection"]
A0["Auto-detect schema version<br/>from $schema, @context, type"]
end
subgraph Layer1["Layer 1: Schema Validation"]
B["JSON Schema Draft 2020-12<br/>Required fields, types, formats"]
end
subgraph Layer2["Layer 2: Model Validation"]
C["Pydantic v2 Models<br/>Type coercion, URL validation"]
end
subgraph Layer3["Layer 3: JSON-LD Semantic"]
C2["PyLD Expansion<br/>Context resolution, term validation"]
end
subgraph Layer4["Layer 4: Business Logic"]
D["Business Rules & Vocabularies<br/>ISO codes, date logic, GTIN checksums"]
end
subgraph Layer5["Layer 5: Cryptographic"]
E["VC Signature Verification<br/>DID resolution, Ed25519/ECDSA"]
end
subgraph Output
F[/"✅ ValidationResult<br/>.valid | .errors | .signature_valid"/]
end
A --> A0
A0 --> B
B -->|"SCH001-SCH099"| C
C -->|"MOD001-MOD099"| C2
C2 -->|"JLD001-JLD099"| D
D -->|"SEM001-SEM099"| E
E -->|"SIG001-SIG099"| F
from dppvalidator.validators import ValidationEngine
# Run all layers (default)
engine = ValidationEngine()
# Schema validation only (fastest)
engine = ValidationEngine(layers=["schema"])
# Skip schema, run model + semantic
engine = ValidationEngine(layers=["model", "semantic"])
# Enable JSON-LD validation
engine = ValidationEngine(validate_jsonld=True)
# Enable signature verification
engine = ValidationEngine(verify_signatures=True)
result = engine.validate(dpp_data)
if result.signature_valid:
print(f"Signed by: {result.issuer_did}")| Layer | Mean Time | Throughput |
|---|---|---|
| Model (minimal) | 0.012ms | 84,387 ops/sec |
| Model (full) | 0.016ms | 63,945 ops/sec |
| Semantic | 0.005ms | 200,889 ops/sec |
| Full (Model+Sem) | 0.022ms | 45,735 ops/sec |
| Engine Creation | 0.001ms | 1,524,868 ops/sec |
Benchmarked on Apple Silicon (M-series). JSON-LD and signature verification depend on network latency (cached after first request).
Extend dppvalidator with custom validators following the SemanticRule protocol:
from dppvalidator.plugins import PluginRegistry
# Create a custom validator implementing SemanticRule protocol
class TextileFiberRule:
"""Custom rule to validate textile fiber composition."""
rule_id = "TEX001"
description = "Fiber composition must sum to 100%"
severity = "error"
suggestion = "Ensure all fiber percentages add up to 100"
docs_url = "https://example.com/textile-rules"
def check(self, passport):
"""Return list of (json_path, error_message) tuples."""
violations = []
# Add your validation logic here
return violations
# Register with the plugin registry
registry = PluginRegistry(auto_discover=False)
registry.register_validator("textile", TextileFiberRule)
# ValidationEngine auto-discovers plugins via entry points by default
engine = ValidationEngine(load_plugins=True)dppvalidator includes full support for the EU DPP Core Ontology from CIRPASS-2:
from dppvalidator.validators import SchemaValidator
from dppvalidator.exporters import EUDPPJsonLDExporter
# Dual-mode validation: UNTP (default) or EU DPP
validator = SchemaValidator(schema_type="cirpass")
result = validator.validate(dpp_data)
# Export to EU DPP-aligned JSON-LD
exporter = EUDPPJsonLDExporter(map_terms=True)
jsonld = exporter.export(passport)| Feature | Description |
|---|---|
| Dual-mode validation | Switch between UNTP and CIRPASS schemas |
| EU DPP vocabulary | 24 actor/role classes, 16 PEF categories |
| JSON-LD export | EU DPP-aligned output with term mapping |
| SHACL validation | Optional RDF-based validation (requires pip install dppvalidator[rdf]) |
🏆 Aligned with dpp.vocabulary-hub.eu/specifications as of 2025-02-01. To our knowledge, dppvalidator is the most comprehensive open-source Python package for EU DPP vocabulary compliance.
📚 Full documentation: artiso-ai.github.io/dppvalidator
| Guide | Description |
|---|---|
| Installation | Setup and CLI extras |
| Quick Start | Get started in 5 minutes |
| CLI Reference | Command-line interface |
| Validation Layers | Understanding the five-layer architecture |
| CIRPASS-2 Integration | EU DPP ontology alignment |
| API Reference | Complete Python API |
The EU's Ecodesign for Sustainable Products Regulation (ESPR) mandates Digital Product Passports for textiles starting 2027. dppvalidator helps fashion brands prepare now:
| DPP Requirement | How dppvalidator Helps |
|---|---|
| Material composition & weights | Validates fiber percentages sum to 100% |
| Manufacturing processes | Validates supply chain node structure |
| Environmental indicators | Supports LCA data validation |
| Chemical compliance (REACH) | Semantic validation for substance references |
| Traceability information | Validates production stage URIs |
| Durability & recyclability | Custom validators via plugin system |
dppvalidator serves diverse stakeholders across the product lifecycle:
| Use Case | Target User | Value Proposition |
|---|---|---|
| Pre-production validation | Brand product teams | Catch errors before QR code generation |
| Supplier onboarding | Procurement teams | Validate supplier DPP submissions |
| CI/CD compliance gates | DevOps teams | Automated compliance checks in pipelines |
| Data migration | IT teams | Validate legacy data exports to DPP format |
| Consumer apps | App developers | DPP scanning, parsing, and display |
| Recycling facilities | Waste management | Material identification for sorting |
| Resale platforms | Recommerce | Product authentication and history |
| Customs & compliance | Border control | Import compliance verification |
Example: CI/CD Integration
# .github/workflows/validate-dpp.yml
- name: Validate DPP files
run: dppvalidator validate data/passports/*.json --strictExample: Supplier Validation API
from dppvalidator.validators import ValidationEngine
engine = ValidationEngine(strict_mode=True)
def validate_supplier_submission(dpp_json: dict) -> bool:
result = engine.validate(dpp_json)
if not result.valid:
raise ValueError(f"Invalid DPP: {result.errors}")
return True- UNTP Digital Product Passport — UN/CEFACT specification
- EU ESPR Regulation — Ecodesign for Sustainable Products
- W3C Verifiable Credentials — Credential format standard
⚠️ Note on UNTP Specification: The UNTP Digital Product Passport specification is under active development and not yet ready for production implementation. We track the latest maintained releases and will update dppvalidator as the specification stabilizes. See the UNTP releases page for current status.
| Feature | Status | Recommendation |
|---|---|---|
| Data Integrity Proofs | ✅ Supported | Use for production |
| JWS Proofs | ✅ Supported | Use for production |
| JWT Credentials | ✅ Supported | Full verification (ES256, ES384, EdDSA) |
JWT Credentials: JWT-encoded Verifiable Credentials are fully verified via DID resolution and cryptographic signature verification. Supported algorithms include ES256, ES384, and EdDSA (Ed25519). For maximum interoperability, Data Integrity Proofs are recommended.
The signature verification uses simplified JSON canonicalization (sorted keys) rather than full URDNA2015 RDF canonicalization. This may cause verification failures for credentials signed with strict W3C Data Integrity canonicalization.
For production deployments requiring full W3C VC compliance:
# Future: Use pyld for URDNA2015 canonicalization
from pyld import jsonld
normalized = jsonld.normalize(credential, {"algorithm": "URDNA2015"})We welcome contributions! Here's how to get started:
# Clone the repository
git clone https://github.com/artiso-ai/dppvalidator.git
cd dppvalidator
# Install dependencies with uv
uv sync --all-extras
# Run tests
uv run pytest
# Run linting
uv run ruff check .
See our Contributing Guide for more details.
|
dppvalidator is developed and maintained by ARTISO, a Barcelona-based fashion technology company. |
|
We believe the fashion industry's transition to sustainability requires open, accessible tools. By open-sourcing dppvalidator, we're enabling brands of all sizes - from emerging designers to global retailers - to meet EU compliance requirements without proprietary solutions.
Our commitment:
- Open Source First - Core validation engine will always be free and MIT-licensed
- Fashion Expertise - Built by a team with deep industry experience at major brands
- Circular Economy - Enabling the data infrastructure for textile recycling and resale
- Community Driven - We welcome contributions from brands, sustainability experts, and developers
"The circular economy can only work if recyclers can read the tags. dppvalidator ensures interoperability across the entire fashion supply chain."
MIT License — see LICENSE for details.
artiso.ai · Documentation · Issues
Built with ❤️ in Barcelona for a more sustainable fashion industry