itsdangerous
PyPIv2.2.0Safely pass data to untrusted environments and back.
Not recommended for new projects
No — itsdangerous should not be adopted for new projects. Last published 876 days ago. No license declared — you have no explicit right to use this code.
- ?Adoption: grade ?, Not reported by this registry.
No download data reported for this package yet.
- DMaintenance: grade D, Poor — a real concern.
Last published 876 days ago.
- AWeight: grade A, Excellent.
Zero runtime dependencies, about 16 KB installed.
- BSupply chain: grade B, Good.
This package lists no maintainer.
- FLicense: grade F, Failing.
No license declared — you have no explicit right to use this code.
Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.
Install cost
What you actually take on by adding itsdangerous to a project.
Runtime packages this one declares itself.
Distinct packages in the full runtime tree, deduplicated the way a package manager would.
Unpacked size of this package plus its entire runtime tree.
Longest resolved dependency chain below this package.
Compatibility
- Python
- python >=3.8
Quick start
A usage example from the itsdangerous README.
from itsdangerous import URLSafeSerializer
auth_s = URLSafeSerializer("secret key", "auth")
token = auth_s.dumps({"id": 5, "name": "itsdangerous"})
print(token)
# eyJpZCI6NSwibmFtZSI6Iml0c2Rhbmdlcm91cyJ9.6YP6T0BaO67XP--9UzTrmurXSmg
data = auth_s.loads(token)
print(data["name"])
# itsdangerousUsed by
Popular packages that depend on itsdangerous.
Relationship graph
Dependencies (left) and dependents (right) of itsdangerous.
Frequently installed together
Release history
No releases in the last two years, typically about 36 days apart.
| Version | Published | Size | License |
|---|---|---|---|
| 2.2.0latest | 2 years ago | 16 KB | — |
| 2.1.2 | 4 years ago | 15 KB | — |
| 2.1.1 | 4 years ago | 15 KB | — |
| 2.1.0 | 4 years ago | 15 KB | — |
| 2.0.1 | 5 years ago | 18 KB | — |
| 2.0.0 | 5 years ago | 18 KB | — |
| 2.0.0rc2 | 5 years ago | 18 KB | — |
| 2.0.0rc1 | 5 years ago | 18 KB | — |
| 2.0.0a1 | 6 years ago | 16 KB | — |
| 1.1.0 | 7 years ago | 16 KB | — |
| 0.24 | 12 years ago | 45 KB | — |
| 0.23 | 13 years ago | 45 KB | — |
| 0.22 | 13 years ago | 9.2 KB | — |
| 0.21 | 13 years ago | 8.4 KB | — |
| 0.20 | 13 years ago | 8.4 KB | — |
Overview
itsdangerous is an PyPI package that safely pass data to untrusted environments and back. It has 1 known dependents in the graph. The latest version is 2.2.0.
Who should use it
Teams working in the PyPI ecosystem who need safely pass data to untrusted environments and back and value a focused solution.
When not to use it
Consider an alternative if you need to or if a more actively-maintained option better fits your PyPI stack.
Pros
- Zero runtime dependencies — minimal footprint.
Cons
- No license detected — review usage terms before adopting.
Auto-generated from collected registry metadata. No external claims are inferred.
Funding
Frequently asked questions
Should I use itsdangerous?
No — itsdangerous should not be adopted for new projects. Last published 876 days ago. No license declared — you have no explicit right to use this code.
How do I install itsdangerous?
Run `pip install itsdangerous` to add itsdangerous to your PyPI project.
What license is itsdangerous released under?
No license was detected in itsdangerous's metadata; review the repository before use.
How popular is itsdangerous?
PyPI does not publish download counts. Within PackageGraph's crawl, 1 known packages depend on itsdangerous.
Is itsdangerous still maintained?
The most recent release of itsdangerous (v2.2.0) was published 2 years ago.