https://github.com/pallets/itsdangerous
hmac itsdangerous pallets python security serialization
Score: 33.790130670166654
Last synced: about 13 hours ago
JSON representation
Repository metadata:
Safely pass trusted data to untrusted environments and back.
- Host: GitHub
- URL: https://github.com/pallets/itsdangerous
- Owner: pallets
- License: bsd-3-clause
- Created: 2011-06-24T00:09:55.000Z (about 15 years ago)
- Default Branch: main
- Last Pushed: 2025-06-14T20:35:46.000Z (about 1 year ago)
- Last Synced: 2026-08-25T00:26:29.122Z (1 day ago)
- Topics: hmac, itsdangerous, pallets, python, security, serialization
- Language: Python
- Homepage: https://itsdangerous.palletsprojects.com
- Size: 873 KB
- Stars: 3,126
- Watchers: 54
- Forks: 276
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGES.rst
- License: LICENSE.txt
-
Funding:
- Github: pallets
- Custom: https://palletsprojects.com/donate
- Tidelift: pypi/Flask
Owner metadata:
- Name: Pallets
- Login: pallets
- Email: contact@palletsprojects.com
- Kind: organization
- Description:
- Website: https://palletsprojects.com
- Location:
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/16748505?v=4
- Repositories: 17
- Last Synced at: 2026-08-22T23:34:21.232Z
- Profile URL: https://github.com/pallets
GitHub Events
Total
- Create event: 6
- Delete event: 6
- Fork event: 14
- Issue comment event: 12
- Issues event: 11
- Pull request event: 16
- Pull request review comment event: 1
- Push event: 16
- Watch event: 157
- Total: 239
Last Year
- Fork event: 5
- Issue comment event: 2
- Issues event: 4
- Pull request event: 3
- Pull request review comment event: 1
- Watch event: 32
- Total: 47
Committers metadata
Last synced: 6 days ago
Total Commits: 436
Total Committers: 44
Avg Commits per committer: 9.909
Development Distribution Score (DDS): 0.638
Commits in past year: 0
Committers in past year: 0
Avg Commits per committer in past year: 0.0
Development Distribution Score (DDS) in past year: 0.0
| Name | Commits | |
|---|---|---|
| David Lord | d****m@g****m | 158 |
| Armin Ronacher | a****r@a****m | 79 |
| dependabot[bot] | 4****] | 53 |
| dependabot-preview[bot] | 2****] | 48 |
| pre-commit-ci[bot] | 6****] | 32 |
| Thomas Waldmann | t****w@w****e | 9 |
| Markus Unterwaditzer | m****s@u****t | 8 |
| Jan Brauer | j****n@j****m | 5 |
| Arnout van Meer | a****t@f****t | 5 |
| Hsiaoming Yang | m****e@l****m | 4 |
| Alan Hamlett | a****t@g****m | 2 |
| Jurie Horneman | j****n@p****m | 1 |
| Adam Englander | a****m@v****s | 1 |
| Christian Rotzoll | p****c | 1 |
| Daniel Neuhäuser | d****h@g****m | 1 |
| Daniele Nicolodi | d****e@g****t | 1 |
| Daverball | d****e@d****m | 1 |
| Dirk Müller | d****k@d****e | 1 |
| Eeo Jun | e****o | 1 |
| Emil Sadek | e****k@h****m | 1 |
| G. Fioravante | 4****e | 1 |
| Grey Li | w****i@g****m | 1 |
| Łukasz Langa | l****z@l****l | 1 |
| Zach Hugnou | z****u@g****m | 1 |
| Tristan Escalada | t****n@e****s | 1 |
| Thomas Grainger | t****n@g****m | 1 |
| Taha Jahangir | m****r@g****m | 1 |
| Steven Loria | s****1@g****m | 1 |
| Steve Perkins | s****e | 1 |
| Simon Liedtke | l****n@g****m | 1 |
| and 14 more... | ||
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 29
Total pull requests: 192
Average time to close issues: 20 days
Average time to close pull requests: 13 days
Total issue authors: 28
Total pull request authors: 35
Average comments per issue: 1.76
Average comments per pull request: 0.27
Merged pull request: 129
Bot issues: 0
Bot pull requests: 113
Past year issues: 6
Past year pull requests: 19
Past year average time to close issues: about 2 months
Past year average time to close pull requests: about 1 hour
Past year issue authors: 6
Past year pull request authors: 19
Past year average comments per issue: 2.17
Past year average comments per pull request: 0.37
Past year merged pull request: 0
Past year bot issues: 0
Past year bot pull requests: 0
Top Issue Authors
- davidism (2)
- mdziczkowski (1)
- ThorstenEngel (1)
- jace (1)
- orkhank (1)
- stgn (1)
- TheLostProgrammer (1)
- mike-england (1)
- alexeykomp (1)
- rafaeloliveiraext (1)
- evidencebp (1)
- Donovant (1)
- ShaneHarvey (1)
- cheizer (1)
- awiprayitno (1)
Top Pull Request Authors
- dependabot[bot] (82)
- davidism (44)
- pre-commit-ci[bot] (31)
- Daverball (2)
- evidencebp (2)
- aenglander (2)
- gyanu2507 (1)
- zafar1162014 (1)
- daleselaji-dev (1)
- ahmadalguydi (1)
- esadek (1)
- nerdytyphanie (1)
- daniel7an (1)
- CodingFeng101 (1)
- Bahtya (1)
Top Issue Labels
- typing (1)
Top Pull Request Labels
- dependencies (82)
- python (11)
- github_actions (7)
- typing (5)
Package metadata
- Total packages: 18
-
Total downloads:
- pypi: 218,453,348 last-month
- conda: 11,839,941 total
- Total docker downloads: 3,203,986,795
- Total dependent packages: 630 (may contain duplicates)
- Total dependent repositories: 260,850 (may contain duplicates)
- Total versions: 63
- Total maintainers: 2
pypi.org: itsdangerous
Safely pass data to untrusted environments and back.
- Homepage:
- Documentation: https://itsdangerous.palletsprojects.com/
- Licenses: BSD License
- Latest release: 2.2.0 (published over 2 years ago)
- Last Synced: 2026-08-24T13:37:34.374Z (1 day ago)
- Versions: 27
- Dependent Packages: 579
- Dependent Repositories: 259,870
- Downloads: 218,453,348 Last month
- Docker Downloads: 3,203,986,795
-
Rankings:
- Dependent repos count: 0.003%
- Docker downloads count: 0.02%
- Downloads: 0.025%
- Dependent packages count: 0.049%
- Average: 1.107%
- Stargazers count: 1.941%
- Forks count: 4.605%
- Maintainers (1)
-
Funding:
- https://palletsprojects.com/donate
alpine-v3.18: py3-itsdangerous
Python3 helper to pass trusted data to untrusted environments
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.1.2-r2 (published over 3 years ago)
- Last Synced: 2026-04-01T03:44:25.756Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 2.768%
- Stargazers count: 4.583%
- Forks count: 6.488%
alpine-v3.18: py3-itsdangerous-pyc
Precompiled Python bytecode for py3-itsdangerous
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.1.2-r2 (published over 3 years ago)
- Last Synced: 2026-08-11T18:05:34.290Z (14 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 2.768%
- Stargazers count: 4.583%
- Forks count: 6.488%
alpine-edge: py3-itsdangerous
Python3 helper to pass trusted data to untrusted environments
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.2.0-r1 (published 5 months ago)
- Last Synced: 2026-04-01T03:09:33.894Z (5 months ago)
- Versions: 6
- Dependent Packages: 1
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Average: 4.548%
- Stargazers count: 4.645%
- Dependent packages count: 6.031%
- Forks count: 7.514%
- Maintainers (1)
alpine-v3.17: py3-itsdangerous
Python3 helper to pass trusted data to untrusted environments
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.1.2-r0 (published almost 4 years ago)
- Last Synced: 2026-08-11T18:10:11.371Z (14 days ago)
- Versions: 1
- Dependent Packages: 3
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Stargazers count: 4.221%
- Average: 4.961%
- Forks count: 5.765%
- Dependent packages count: 9.857%
conda-forge.org: itsdangerous
Various helpers to pass data to untrusted environments and to get it back safe and sound. Data is cryptographically signed to ensure that a token has not been tampered with. It's possible to customize how data is serialized. Data is compressed as needed. A timestamp can be added and verified automatically while loading a token.
- Homepage: https://palletsprojects.com/p/itsdangerous/
- Licenses: BSD-3-Clause
- Latest release: 2.1.2 (published over 4 years ago)
- Last Synced: 2026-07-25T02:01:25.699Z (about 1 month ago)
- Versions: 7
- Dependent Packages: 35
- Dependent Repositories: 490
- Downloads: 11,465,015 Total
-
Rankings:
- Dependent repos count: 1.273%
- Dependent packages count: 1.941%
- Average: 5.809%
- Stargazers count: 7.89%
- Forks count: 12.131%
alpine-edge: py3-itsdangerous-pyc
Precompiled Python bytecode for py3-itsdangerous
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.2.0-r0 (published almost 2 years ago)
- Last Synced: 2026-08-11T16:04:34.160Z (14 days ago)
- Versions: 4
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Stargazers count: 4.847%
- Average: 6.727%
- Forks count: 7.811%
- Dependent packages count: 14.251%
- Maintainers (1)
anaconda.org: itsdangerous
Various helpers to pass data to untrusted environments and to get it back safe and sound. Data is cryptographically signed to ensure that a token has not been tampered with. It's possible to customize how data is serialized. Data is compressed as needed. A timestamp can be added and verified automatically while loading a token.
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.2.0 (published over 2 years ago)
- Last Synced: 2026-08-11T18:05:12.296Z (14 days ago)
- Versions: 6
- Dependent Packages: 12
- Dependent Repositories: 490
- Downloads: 374,926 Total
-
Rankings:
- Dependent packages count: 4.418%
- Dependent repos count: 7.534%
- Average: 12.542%
- Stargazers count: 15.855%
- Forks count: 22.36%
alpine-v3.20: py3-itsdangerous-pyc
Precompiled Python bytecode for py3-itsdangerous
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.1.2-r4 (published over 2 years ago)
- Last Synced: 2026-08-05T10:03:49.073Z (21 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
alpine-v3.21: py3-itsdangerous-pyc
Precompiled Python bytecode for py3-itsdangerous
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.2.0-r0 (published almost 2 years ago)
- Last Synced: 2026-08-11T18:05:15.569Z (14 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
alpine-v3.22: py3-itsdangerous
Python3 helper to pass trusted data to untrusted environments
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.2.0-r0 (published almost 2 years ago)
- Last Synced: 2026-08-11T18:05:09.852Z (14 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
alpine-v3.23: py3-itsdangerous-pyc
Precompiled Python bytecode for py3-itsdangerous
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.2.0-r0 (published almost 2 years ago)
- Last Synced: 2026-07-28T18:01:19.813Z (28 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
alpine-v3.19: py3-itsdangerous-pyc
Precompiled Python bytecode for py3-itsdangerous
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.1.2-r3 (published about 3 years ago)
- Last Synced: 2026-08-03T19:02:47.539Z (22 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
alpine-v3.19: py3-itsdangerous
Python3 helper to pass trusted data to untrusted environments
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.1.2-r3 (published about 3 years ago)
- Last Synced: 2026-04-01T03:27:42.293Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
alpine-v3.21: py3-itsdangerous
Python3 helper to pass trusted data to untrusted environments
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.2.0-r0 (published almost 2 years ago)
- Last Synced: 2026-08-07T19:04:21.208Z (18 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
alpine-v3.23: py3-itsdangerous
Python3 helper to pass trusted data to untrusted environments
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.2.0-r0 (published almost 2 years ago)
- Last Synced: 2026-08-11T16:07:46.448Z (14 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
alpine-v3.22: py3-itsdangerous-pyc
Precompiled Python bytecode for py3-itsdangerous
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.2.0-r0 (published almost 2 years ago)
- Last Synced: 2026-08-11T18:05:06.900Z (14 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
alpine-v3.20: py3-itsdangerous
Python3 helper to pass trusted data to untrusted environments
- Homepage: https://github.com/pallets/itsdangerous
- Licenses: BSD-3-Clause
- Latest release: 2.1.2-r4 (published over 2 years ago)
- Last Synced: 2026-07-28T22:02:19.166Z (28 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
- Maintainers (1)
Dependencies
- pip-compile-multi *
- pre-commit *
- tox *
- Pallets-Sphinx-Themes *
- Sphinx *
- sphinx-issues *
- sphinxcontrib-log-cabinet *
- freezegun *
- pytest *
- attrs ==21.4.0
- freezegun ==1.2.1
- iniconfig ==1.1.1
- packaging ==21.3
- pluggy ==1.0.0
- py ==1.11.0
- pyparsing ==3.0.8
- pytest ==7.1.2
- python-dateutil ==2.8.2
- six ==1.16.0
- tomli ==2.0.1
- mypy *
- mypy ==0.950
- mypy-extensions ==0.4.3
- tomli ==2.0.1
- typing-extensions ==4.2.0
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- actions/download-artifact 9bc31d5ccc31df68ecc42ccf4149144866c47d8a composite
- actions/setup-python d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 composite
- actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
- pypa/gh-action-pypi-publish c7f29f7adef1a245bd91520e94867e5c6eedddcc composite
- build *
- build ==0.9.0
- packaging ==23.0
- pep517 ==0.13.0
- tomli ==2.0.1
- dessant/lock-threads v4 composite
- actions/cache v3 composite
- actions/checkout v3 composite
- actions/setup-python v4 composite
- build ==0.9.0 development
- cachetools ==5.2.0 development
- cfgv ==3.3.1 development
- chardet ==5.1.0 development
- click ==8.1.3 development
- colorama ==0.4.6 development
- distlib ==0.3.6 development
- filelock ==3.9.0 development
- identify ==2.5.11 development
- nodeenv ==1.7.0 development
- pep517 ==0.13.0 development
- pip-compile-multi ==2.6.1 development
- pip-tools ==6.12.1 development
- platformdirs ==2.6.2 development
- pre-commit ==2.21.0 development
- pyproject-api ==1.2.1 development
- pyyaml ==6.0 development
- toposort ==1.7 development
- tox ==4.1.0 development
- virtualenv ==20.17.1 development
- wheel ==0.38.4 development
- alabaster ==0.7.12
- babel ==2.11.0
- certifi ==2022.12.7
- charset-normalizer ==2.1.1
- docutils ==0.19
- idna ==3.4
- imagesize ==1.4.1
- jinja2 ==3.1.2
- markupsafe ==2.1.1
- packaging ==22.0
- pallets-sphinx-themes ==2.0.3
- pygments ==2.13.0
- pytz ==2022.7
- requests ==2.28.1
- snowballstemmer ==2.2.0
- sphinx ==6.0.0
- sphinx-issues ==3.0.1
- sphinxcontrib-applehelp ==1.0.2
- sphinxcontrib-devhelp ==1.0.2
- sphinxcontrib-htmlhelp ==2.0.0
- sphinxcontrib-jsmath ==1.0.1
- sphinxcontrib-log-cabinet ==1.0.1
- sphinxcontrib-qthelp ==1.0.3
- sphinxcontrib-serializinghtml ==1.1.5
- urllib3 ==1.26.13