https://github.com/Kludex/starlette
asgi async http python websockets
Score: 35.85706696122148
Last synced: about 13 hours ago
JSON representation
Repository metadata:
The little ASGI framework that shines. 🌟
- Host: GitHub
- URL: https://github.com/Kludex/starlette
- Owner: Kludex
- License: bsd-3-clause
- Created: 2018-06-25T13:16:21.000Z (about 8 years ago)
- Default Branch: main
- Last Pushed: 2026-08-23T20:56:13.000Z (1 day ago)
- Last Synced: 2026-08-23T23:36:07.760Z (1 day ago)
- Topics: asgi, async, http, python, websockets
- Language: Python
- Homepage: https://starlette.dev
- Size: 7.74 MB
- Stars: 12,562
- Watchers: 103
- Forks: 1,269
- Open Issues: 70
-
Metadata Files:
- Readme: README.md
- Contributing: docs/contributing.md
- Funding: .github/FUNDING.yml
- License: LICENSE.md
- Citation: CITATION.cff
-
Funding:
- Github: Kludex
Owner metadata:
- Name: Marcelo Trylesinski
- Login: Kludex
- Email: marcelotryle@gmail.com
- Kind: user
- Description: Software Engineer @ Pydantic 🇧🇷🇺🇾🇮🇹 Uvicorn & Starlette maintainer 🦄🌟 FastAPI Expert ⚡
- Website: https://www.fastapiexpert.com/
- Location: Utrecht, Netherlands
- Twitter: marcelotryle
- Company: @pydantic
- Icon url: https://avatars.githubusercontent.com/u/7353520?u=df8a3f06ba8f55ae1967a3e2d5ed882903a4e330&v=4
- Repositories: 193
- Last Synced at: 2026-08-24T02:37:53.580Z
- Profile URL: https://github.com/Kludex
GitHub Events
Total
- Create event: 81
- Delete event: 56
- Discussion event: 6
- Fork event: 32
- Issue comment event: 71
- Issues event: 23
- Pull request event: 127
- Pull request review comment event: 28
- Pull request review event: 60
- Push event: 160
- Release event: 6
- Watch event: 272
- Total: 922
Last Year
- Create event: 81
- Delete event: 56
- Discussion event: 6
- Fork event: 32
- Issue comment event: 71
- Issues event: 23
- Pull request event: 127
- Pull request review comment event: 28
- Pull request review event: 60
- Push event: 160
- Release event: 6
- Watch event: 272
- Total: 922
Committers metadata
Last synced: 6 days ago
Total Commits: 1,617
Total Committers: 335
Avg Commits per committer: 4.827
Development Distribution Score (DDS): 0.76
Commits in past year: 198
Committers in past year: 37
Avg Commits per committer in past year: 5.351
Development Distribution Score (DDS) in past year: 0.404
| Name | Commits | |
|---|---|---|
| Tom Christie | t****m@t****m | 388 |
| Marcelo Trylesinski | m****e@g****m | 337 |
| dependabot[bot] | 4****] | 159 |
| Amin Alaee | m****e@g****m | 53 |
| Adrian Garcia Badaracco | 1****b | 44 |
| Scirlat Danut | d****t@g****m | 31 |
| Daniel Hahler | g****b@t****e | 23 |
| Jamie Hewland | j****d@g****m | 22 |
| Florimond Manca | f****a@g****m | 16 |
| Alexander Botello | a****o@g****u | 16 |
| Alex Oleshkevich | a****h@g****m | 15 |
| Thomas Grainger | t****n@g****m | 14 |
| Sebastián Ramírez | t****o@g****m | 14 |
| Marcos Schroh | s****m@g****m | 10 |
| Rohan Santhosh Kumar | 1****t | 9 |
| Didip Kerabat | d****k@g****m | 8 |
| Erik | e****r@g****m | 8 |
| Jordan Eremieff | e****m | 8 |
| Renan Heckert Leal | 1****e | 7 |
| 云中君 | m****e@a****m | 6 |
| Taoufik | a****k@g****m | 6 |
| Santiago | s****y@g****m | 6 |
| Steinn Eldjárn Sigurðarson | s****s@g****m | 5 |
| Simon Willison | s****n@g****m | 5 |
| Rafał Pitoń | r****l@m****m | 5 |
| Pierre Vanliefland | p****d | 5 |
| Jeff Buttars | j****s@g****m | 5 |
| Shahriyar Rzayev | r****r@y****m | 4 |
| Alex Grönholm | a****m@n****i | 4 |
| Eugene Molotov | e****v@y****u | 4 |
| and 305 more... | ||
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 21
Total pull requests: 262
Average time to close issues: about 1 month
Average time to close pull requests: 18 days
Total issue authors: 14
Total pull request authors: 107
Average comments per issue: 2.57
Average comments per pull request: 0.92
Merged pull request: 129
Bot issues: 0
Bot pull requests: 25
Past year issues: 19
Past year pull requests: 257
Past year average time to close issues: about 1 month
Past year average time to close pull requests: 8 days
Past year issue authors: 12
Past year pull request authors: 103
Past year average comments per issue: 2.47
Past year average comments per pull request: 0.9
Past year merged pull request: 127
Past year bot issues: 0
Past year bot pull requests: 25
Top Issue Authors
- Kludex (5)
- Mukller (3)
- lovelydinosaur (2)
- gopackgo90 (1)
- marunguy (1)
- negillett (1)
- ockan (1)
- graingert (1)
- lukasmasuch (1)
- brian316 (1)
- smac89 (1)
- nikolauspschuetz (1)
- imtoopunkforyou (1)
- realsby (1)
Top Pull Request Authors
- Kludex (111)
- dependabot[bot] (25)
- Rohan5commit (6)
- TheWesDias (4)
- r266-tech (4)
- muhamedfazalps (3)
- y2kbugger (2)
- krrishapatel (2)
- diskeu (2)
- Shevanio (2)
- tiangolo (2)
- waketzheng (2)
- Solaris-star (2)
- 11kkw (2)
- faroukBakari (1)
Top Issue Labels
- duplicate (2)
- feature (1)
- bug (1)
Top Pull Request Labels
- dependencies (25)
- python:uv (16)
- github_actions (8)
- python (1)
Package metadata
- Total packages: 3
-
Total downloads:
- conda: 5,077,635 total
- pypi: 688,155,445 last-month
- Total docker downloads: 189,831,124
- Total dependent packages: 736 (may contain duplicates)
- Total dependent repositories: 29,808 (may contain duplicates)
- Total versions: 273
- Total maintainers: 2
- Total advisories: 13
pypi.org: starlette
The little ASGI library that shines.
- Homepage: https://github.com/Kludex/starlette
- Documentation: https://starlette.dev/
- Licenses: BSD-3-Clause
- Latest release: 1.6.0 (published 16 days ago)
- Last Synced: 2026-08-23T11:11:18.773Z (1 day ago)
- Versions: 202
- Dependent Packages: 709
- Dependent Repositories: 29,789
- Downloads: 688,155,445 Last month
- Docker Downloads: 189,831,124
-
Rankings:
- Dependent packages count: 0.038%
- Downloads: 0.039%
- Dependent repos count: 0.041%
- Docker downloads count: 0.379%
- Average: 0.5%
- Stargazers count: 0.575%
- Forks count: 1.927%
- Maintainers (2)
-
Funding:
- https://github.com/sponsors/Kludex
-
Advisories:
- Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS
- Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname
- Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows
- Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`
- Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
- Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``
- Starlette has possible denial-of-service vector when parsing large files in multipart forms
- Starlette Denial of service (DoS) via multipart/form-data
- Duplicate Advisory: Starlette Content-Type Header ReDoS
- Duplicate Advisory: Starlette vulnerable to directory traversal
- Starlette has Path Traversal vulnerability in StaticFiles
- Duplicate Advisory: Starlette allows an unauthenticated and remote attacker to specify any number of form fields or files
- MultipartParser denial of service with too many fields or files
conda-forge.org: starlette
Starlette is a lightweight [ASGI](https://asgi.readthedocs.io/en/latest/) framework/toolkit. It is ideal for building high performance asyncio services, and supports both HTTP and WebSockets.
- Homepage: https://www.starlette.io/
- Licenses: BSD-3-Clause
- Latest release: 0.22.0 (published almost 4 years ago)
- Last Synced: 2026-03-22T22:15:50.793Z (5 months ago)
- Versions: 55
- Dependent Packages: 27
- Dependent Repositories: 19
- Downloads: 4,914,047 Total
-
Rankings:
- Dependent packages count: 2.466%
- Stargazers count: 3.394%
- Average: 4.989%
- Forks count: 6.009%
- Dependent repos count: 8.086%
conda-forge.org: starlette-full
Starlette is a lightweight [ASGI](https://asgi.readthedocs.io/en/latest/) framework/toolkit. It is ideal for building high performance asyncio services, and supports both HTTP and WebSockets.
- Homepage: https://pypi.org/project/starlette
- Licenses: BSD-3-Clause
- Latest release: 0.22.0 (published almost 4 years ago)
- Last Synced: 2026-04-01T16:11:22.709Z (5 months ago)
- Versions: 16
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 163,588 Total
-
Rankings:
- Stargazers count: 3.189%
- Forks count: 5.7%
- Average: 23.523%
- Dependent repos count: 34.025%
- Dependent packages count: 51.175%
Dependencies
- anyio 4.14.2
- ast-serialize 0.6.0
- attrs 25.3.0
- backports-tarfile 1.2.0
- black 26.5.1
- certifi 2025.8.3
- cffi 2.0.0
- charset-normalizer 3.4.3
- click 8.2.1
- colorama 0.4.6
- coverage 7.15.2
- cryptography 48.0.1
- deepmerge 2.0
- docutils 0.22
- exceptiongroup 1.3.0
- ghp-import 2.1.0
- griffelib 2.0.0
- h11 0.16.0
- httpcore 1.0.9
- httpcore2 2.9.1
- httpx 0.28.1
- httpx2 2.9.1
- id 1.5.0
- idna 3.18
- importlib-metadata 9.0.0
- iniconfig 2.1.0
- itsdangerous 2.2.0
- jaraco-classes 3.4.0
- jaraco-context 6.0.1
- jaraco-functools 4.3.0
- jeepney 0.9.0
- jinja2 3.1.6
- keyring 25.6.0
- librt 0.13.0
- markdown 3.9
- markdown-it-py 4.0.0
- markupsafe 3.0.2
- mdurl 0.1.2
- mergedeep 1.3.4
- mkdocs 1.6.1
- mkdocs-autorefs 1.4.3
- mkdocs-get-deps 0.2.0
- mkdocstrings 1.0.6
- mkdocstrings-python 2.0.5
- more-itertools 10.8.0
- mypy 2.1.0
- mypy-extensions 1.1.0
- nh3 0.3.0
- outcome 1.3.0.post0
- packaging 26.2
- pathspec 1.0.4
- platformdirs 4.4.0
- pluggy 1.6.0
- pycparser 2.22
- pygments 2.20.0
- pymdown-extensions 11.0.1
- pytest 9.1.1
- pytest-codspeed 5.0.3
- python-dateutil 2.9.0.post0
- python-multipart 0.0.32
- pytokens 0.4.1
- pywin32-ctypes 0.2.3
- pyyaml 6.0.3
- pyyaml-env-tag 1.1
- readme-renderer 44.0
- requests 2.33.0
- requests-toolbelt 1.0.0
- rfc3986 2.0.0
- rich 15.0.0
- ruff 0.16.0
- secretstorage 3.3.3
- six 1.17.0
- sniffio 1.3.1
- sortedcontainers 2.4.0
- starlette *
- tomli 2.4.1
- trio 0.33.0
- truststore 0.10.4
- twine 7.0.0
- types-pyyaml 6.0.12.20250516
- typing-extensions 4.15.0
- urllib3 2.7.0
- watchdog 6.0.0
- zensical 0.0.51
- zipp 3.23.0
- zstandard 0.25.0
- CodSpeedHQ/action 0ca9cbbf4623b599a6c3ed4fc8a922942705d9f1 composite
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- astral-sh/setup-uv c771a70e6277c0a99b617c7a806ffedaca235ff9 composite
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- zizmorcore/zizmor-action 6fc4b006235f201fdab3722e17240ab420d580e5 composite
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- astral-sh/setup-uv c771a70e6277c0a99b617c7a806ffedaca235ff9 composite
- cloudflare/wrangler-action ebbaa1584979971c8614a24965b4405ff95890e0 composite
- marocchino/sticky-pull-request-comment 5770ad5eb8f42dd2c4f34da00c94c5381e49af88 composite
- re-actors/alls-green 05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe composite
- anyio >=3.6.2,<5
- typing-extensions >=4.10.0; python_version < '3.13'
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- actions/configure-pages 45bfe0192ca1faeb007ade9deae92b16b8254a0d composite
- actions/deploy-pages cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 composite
- actions/download-artifact 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c composite
- actions/upload-artifact 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a composite
- actions/upload-pages-artifact fc324d3547104276b827a68afc52ff2a11cc49c9 composite
- astral-sh/setup-uv c771a70e6277c0a99b617c7a806ffedaca235ff9 composite
- cloudflare/wrangler-action ebbaa1584979971c8614a24965b4405ff95890e0 composite
- pypa/gh-action-pypi-publish ba38be9e461d3875417946c167d0b5f3d385a247 composite