https://github.com/pallets/werkzeug
http pallets python werkzeug wsgi
Score: 36.15198523871627
Last synced: about 9 hours ago
JSON representation
Repository metadata:
The comprehensive WSGI web application library.
- Host: GitHub
- URL: https://github.com/pallets/werkzeug
- Owner: pallets
- License: bsd-3-clause
- Created: 2010-10-18T11:42:40.000Z (almost 16 years ago)
- Default Branch: main
- Last Pushed: 2026-08-21T23:58:36.000Z (3 days ago)
- Last Synced: 2026-08-22T11:37:52.192Z (2 days ago)
- Topics: http, pallets, python, werkzeug, wsgi
- Language: Python
- Homepage: https://werkzeug.palletsprojects.com
- Size: 16.4 MB
- Stars: 6,875
- Watchers: 208
- Forks: 1,814
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGES.rst
- License: LICENSE.txt
-
Funding:
- Github: pallets
- Custom: https://palletsprojects.com/donate
- Tidelift: pypi/Flask
- Thanks dev: u/gh/pallets
Owner metadata:
- Name: Pallets
- Login: pallets
- Email: contact@palletsprojects.com
- Kind: organization
- Description:
- Website: https://palletsprojects.com
- Location:
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/16748505?v=4
- Repositories: 17
- Last Synced at: 2026-08-22T23:34:21.232Z
- Profile URL: https://github.com/pallets
GitHub Events
Total
- Create event: 53
- Delete event: 55
- Discussion event: 1
- Fork event: 61
- Issue comment event: 173
- Issues event: 90
- Pull request event: 127
- Pull request review comment event: 16
- Pull request review event: 17
- Push event: 140
- Release event: 9
- Watch event: 214
- Total: 956
Last Year
- Create event: 19
- Delete event: 22
- Discussion event: 1
- Fork event: 18
- Issue comment event: 32
- Issues event: 14
- Pull request event: 29
- Pull request review comment event: 2
- Pull request review event: 2
- Push event: 65
- Release event: 3
- Watch event: 51
- Total: 258
Committers metadata
Last synced: 5 days ago
Total Commits: 4,399
Total Committers: 509
Avg Commits per committer: 8.642
Development Distribution Score (DDS): 0.647
Commits in past year: 121
Committers in past year: 14
Avg Commits per committer in past year: 8.643
Development Distribution Score (DDS) in past year: 0.14
| Name | Commits | |
|---|---|---|
| Armin Ronacher | a****r@a****m | 1554 |
| David Lord | d****m@g****m | 819 |
| Markus Unterwaditzer | m****s@u****t | 478 |
| Daniel Neuhäuser | d****h@g****m | 174 |
| pgjones | p****s@g****m | 125 |
| dependabot-preview[bot] | 2****] | 68 |
| dependabot[bot] | 4****] | 65 |
| Ronny Pfannschmidt | R****t@g****e | 47 |
| Georg Brandl | g****g@p****g | 42 |
| pre-commit-ci[bot] | 6****] | 36 |
| ThiefMaster | a****n@p****t | 28 |
| Christopher Grebs | c****g@w****g | 27 |
| Hsiaoming Yang | m****e@l****m | 17 |
| Joshua Bronson | j****b | 16 |
| Puzzlet Chung | p****t@g****m | 15 |
| Teymour Aldridge | t****e@i****m | 14 |
| Thomas Waldmann | t****w@w****e | 12 |
| Antonio Ossa | a****a@u****l | 11 |
| Pascal Hartig | p****g@r****t | 11 |
| northernSage | g****e@g****m | 11 |
| Illia Volochii | i****i@g****m | 10 |
| Timothée Boucher | t****e@g****m | 10 |
| Alex Kahan | a****x@z****m | 10 |
| Stephen Compall | s****l@n****m | 9 |
| Adam Englander | a****r@y****m | 8 |
| Anthony Sottile | a****e@u****u | 8 |
| Jess Austin | j****n@g****m | 8 |
| Brian Cristante | 3****a | 8 |
| Christopher Grebs | e****k@g****m | 7 |
| Kenneth Reitz | m****e@k****m | 7 |
| and 479 more... | ||
Issue and Pull Request metadata
Last synced: about 21 hours ago
Total issues: 224
Total pull requests: 482
Average time to close issues: 3 months
Average time to close pull requests: 19 days
Total issue authors: 184
Total pull request authors: 137
Average comments per issue: 2.46
Average comments per pull request: 0.58
Merged pull request: 324
Bot issues: 0
Bot pull requests: 80
Past year issues: 44
Past year pull requests: 133
Past year average time to close issues: 7 days
Past year average time to close pull requests: 2 days
Past year issue authors: 33
Past year pull request authors: 63
Past year average comments per issue: 2.11
Past year average comments per pull request: 0.39
Past year merged pull request: 70
Past year bot issues: 0
Past year bot pull requests: 0
Top Issue Authors
- davidism (24)
- rioj7 (4)
- APITester26 (3)
- RazerM (2)
- kasium (2)
- ckoehn (2)
- homeworkprod (2)
- Habeeb556 (2)
- Julien00859 (2)
- n1ngu (2)
- afdy (2)
- mgorny (2)
- tobias-urdin (2)
- killershotpy (2)
- decarmona (2)
Top Pull Request Authors
- davidism (180)
- dependabot[bot] (63)
- pgjones (31)
- pre-commit-ci[bot] (17)
- alynn-coefficient (4)
- Grezzo (4)
- gqwtb (4)
- lociii (4)
- palaksobti567-eng (4)
- bohmiiidd (3)
- jdimmerman (3)
- cdce8p (2)
- TomiBelan (2)
- emmanuelthome (2)
- ckoehn (2)
Top Issue Labels
- docs (6)
- routing (5)
- typing (4)
- debugger (2)
- server (2)
- reloader (1)
Top Pull Request Labels
- dependencies (63)
- python (22)
- github_actions (19)
- docs (14)
- server (3)
- typing (3)
- reloader (3)
- routing (2)
- bug (1)
Package metadata
- Total packages: 8
-
Total downloads:
- conda: 17,094,391 total
- pypi: 261,143,325 last-month
- Total docker downloads: 1,155,085,746
- Total dependent packages: 805 (may contain duplicates)
- Total dependent repositories: 65,392 (may contain duplicates)
- Total versions: 156
- Total maintainers: 2
- Total advisories: 12
pypi.org: werkzeug
The comprehensive WSGI web application library.
- Homepage:
- Documentation: https://werkzeug.palletsprojects.com/
- Licenses: BSD-3-Clause
- Latest release: 3.1.8 (published 5 months ago)
- Last Synced: 2026-08-23T12:03:57.755Z (1 day ago)
- Versions: 106
- Dependent Packages: 711
- Dependent Repositories: 63,618
- Downloads: 261,143,302 Last month
- Docker Downloads: 1,155,085,746
-
Rankings:
- Downloads: 0.009%
- Dependent repos count: 0.022%
- Dependent packages count: 0.032%
- Docker downloads count: 0.278%
- Average: 0.297%
- Stargazers count: 0.719%
- Forks count: 0.721%
- Maintainers (1)
-
Funding:
- https://palletsprojects.com/donate
-
Advisories:
- Werkzeug safe_join() allows Windows special device names
- Werkzeug safe_join() allows Windows special device names with compound extensions
- Werkzeug safe_join() allows Windows special device names
- Werkzeug safe_join not safe on Windows
- Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
- Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
- Incorrect parsing of nameless cookies leads to __Host- cookies bypass
- High resource usage when parsing multipart form data with many fields
- Pallets Werkzeug vulnerable to Path Traversal
- Pallets Werkzeug cross-site scripting vulnerability
- Open Redirect in werkzeug
- Pallets Werkzeug Insufficient Entropy
conda-forge.org: werkzeug
**_werkzeug_** German noun: "tool". Etymology: *werk* ("work"), *zeug* ("stuff") Werkzeug is a comprehensive [WSGI](https://wsgi.readthedocs.io/en/latest/) web application library. It began as a simple collection of various utilities for WSGI applications and has become one of the most advanced WSGI utility libraries. It includes: - An interactive debugger that allows inspecting stack traces and source code in the browser with an interactive interpreter for any frame in the stack. - A full-featured request object with objects to interact with headers, query args, form data, files, and cookies. - A response object that can wrap other WSGI applications and handle streaming data. - A routing system for matching URLs to endpoints and generating URLs for endpoints, with an extensible system for capturing variables from URLs. - HTTP utilities to handle entity tags, cache control, dates, user agents, cookies, files, and more. - A threaded WSGI server for use while developing applications locally. - A test client for simulating HTTP requests during testing without requiring running a server. Werkzeug doesn't enforce any dependencies. It is up to the developer to choose a template engine, database adapter, and even how to handle requests. It can be used to build all sorts of end user applications such as blogs, wikis, or bulletin boards. [Flask](https://www.palletsprojects.com/p/flask/) wraps Werkzeug, using it to handle the details of WSGI while providing more structure and patterns for defining powerful applications.
- Homepage: https://pypi.org/project/werkzeug
- Licenses: BSD-3-Clause
- Latest release: 2.2.2 (published about 4 years ago)
- Last Synced: 2026-07-26T03:01:36.761Z (30 days ago)
- Versions: 25
- Dependent Packages: 76
- Dependent Repositories: 887
- Downloads: 16,113,310 Total
-
Rankings:
- Dependent repos count: 0.824%
- Dependent packages count: 1.008%
- Average: 2.313%
- Forks count: 3.149%
- Stargazers count: 4.273%
proxy.golang.org: github.com/pallets/werkzeug
- Homepage:
- Status: removed
- Documentation: https://pkg.go.dev/github.com/pallets/werkzeug#section-documentation
- Licenses: bsd-3-clause
- Latest release: v0.0.0-20260812030550-218a653fd952 (published 13 days ago)
- Last Synced: 2026-08-24T00:35:18.274Z (about 21 hours ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.482%
- Average: 4.633%
- Dependent repos count: 4.783%
anaconda.org: werkzeug
Werkzeug is a WSGI utility library for Python. It's widely used and BSD licensed.
- Homepage: https://palletsprojects.com/p/werkzeug/
- Licenses: BSD-3-Clause
- Latest release: 3.1.6 (published 6 months ago)
- Last Synced: 2026-04-03T00:21:35.320Z (5 months ago)
- Versions: 19
- Dependent Packages: 18
- Dependent Repositories: 887
- Downloads: 981,081 Total
-
Rankings:
- Dependent packages count: 1.506%
- Dependent repos count: 4.978%
- Average: 6.269%
- Forks count: 8.359%
- Stargazers count: 10.234%
pypi.org: werkzeug-patched
The comprehensive WSGI web application library.
- Homepage: https://palletsprojects.com/p/werkzeug/
- Documentation: https://werkzeug.palletsprojects.com/
- Licenses: BSD-3-Clause
- Latest release: 2.2.5 (published about 1 year ago)
- Last Synced: 2026-08-23T12:03:57.919Z (1 day ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 23 Last month
-
Rankings:
- Dependent packages count: 9.469%
- Average: 31.396%
- Dependent repos count: 53.323%
- Maintainers (1)
-
Funding:
- https://palletsprojects.com/donate
ubuntu-24.10: python-werkzeug
- Homepage: https://github.com/pallets/werkzeug/
- Licenses: bsd-3-clause
- Latest release: 3.0.3-1 (published 7 months ago)
- Last Synced: 2026-03-08T07:36:37.887Z (6 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-24.04: python-werkzeug
- Homepage: https://github.com/pallets/werkzeug/
- Licenses: bsd-3-clause
- Latest release: 3.0.1-3 (published 7 months ago)
- Last Synced: 2026-03-06T04:29:54.749Z (6 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-13: python-werkzeug
- Homepage: https://github.com/pallets/werkzeug/
- Documentation: https://packages.debian.org/trixie/python-werkzeug
- Licenses: bsd-3-clause
- Latest release: 3.1.3-2 (published 6 months ago)
- Last Synced: 2026-07-26T14:02:52.340Z (29 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Dependencies
- dessant/lock-threads v4 composite
- actions/cache v3 composite
- actions/checkout v3 composite
- actions/setup-python v4 composite
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
- actions/download-artifact 9bc31d5ccc31df68ecc42ccf4149144866c47d8a composite
- actions/setup-python bd6b4b6205c4dbad673328db7b31b7fab9e241c0 composite
- actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
- pypa/gh-action-pypi-publish f5622bde02b04381239da3573277701ceca8f6a0 composite
- MarkupSafe >=2.1.1
- actions/cache 0057852bfaa89a56745cba8c7296529d2fc39830 composite
- actions/checkout 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 composite
- actions/setup-python 83679a892e2d95755f2dac6acb0bfd1e9ac5d548 composite
- astral-sh/setup-uv 1e862dfacbd1d6d858c55d9b792c756523627244 composite
- pre-commit-ci/lite-action 5d6cc0eb514c891a40562a58a8e71576c5c7fb43 composite
- alabaster 0.7.16
- alabaster 1.0.0
- anyio 4.12.0
- babel 2.17.0
- cachetools 6.2.2
- certifi 2025.11.12
- cffi 2.0.0
- cfgv 3.4.0
- cfgv 3.5.0
- chardet 5.2.0
- charset-normalizer 3.4.4
- click 8.1.8
- click 8.3.1
- colorama 0.4.6
- cryptography 46.0.3
- distlib 0.4.0
- docutils 0.21.2
- ephemeral-port-reserve 1.1.4
- exceptiongroup 1.3.1
- filelock 3.19.1
- filelock 3.20.0
- gha-update 0.2.0
- h11 0.16.0
- httpcore 1.0.9
- httpx 0.28.1
- identify 2.6.15
- idna 3.11
- imagesize 1.4.1
- importlib-metadata 8.7.0
- iniconfig 2.1.0
- iniconfig 2.3.0
- jinja2 3.1.6
- librt 0.6.2
- markupsafe 3.0.3
- mypy 1.19.0
- mypy-extensions 1.1.0
- nodeenv 1.9.1
- packaging 25.0
- pallets-sphinx-themes 2.3.0
- pathspec 0.12.1
- platformdirs 4.4.0
- platformdirs 4.5.0
- pluggy 1.6.0
- pre-commit 4.3.0
- pre-commit 4.5.0
- pre-commit-uv 4.1.5
- pre-commit-uv 4.2.0
- pycparser 2.23
- pygments 2.19.2
- pyproject-api 1.9.1
- pyproject-api 1.10.0
- pyright 1.1.407
- pytest 8.4.2
- pytest 9.0.1
- pytest-timeout 2.4.0
- pyyaml 6.0.3
- requests 2.32.5
- roman-numerals-py 3.1.0
- ruff 0.14.7
- snowballstemmer 3.0.1
- sphinx 7.4.7
- sphinx 8.1.3
- sphinx 8.2.3
- sphinx-autobuild 2024.10.3
- sphinx-autobuild 2025.8.25
- sphinx-notfound-page 1.1.0
- sphinxcontrib-applehelp 2.0.0
- sphinxcontrib-devhelp 2.0.0
- sphinxcontrib-htmlhelp 2.1.0
- sphinxcontrib-jsmath 1.0.1
- sphinxcontrib-log-cabinet 1.0.1
- sphinxcontrib-qthelp 2.0.0
- sphinxcontrib-serializinghtml 2.0.0
- starlette 0.49.3
- starlette 0.50.0
- tomli 2.3.0
- tox 4.30.3
- tox 4.32.0
- tox-uv 1.28.1
- tox-uv 1.29.0
- typing-extensions 4.15.0
- urllib3 2.5.0
- uv 0.9.13
- uvicorn 0.38.0
- virtualenv 20.35.4
- watchdog 6.0.0
- watchfiles 1.1.1
- websockets 15.0.1
- werkzeug 3.2.0.dev0
- zipp 3.23.0
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- zizmorcore/zizmor-action 6fc4b006235f201fdab3722e17240ab420d580e5 composite