blake2signer

v0.5.1

A library to use Blake2 in keyed hashing mode to sign and verify signed data

MPL-2.0
Latest version published 4 months ago
    pip install blake2signer
  
We couldn't find any similar packages Browse all packages

Package Health Score

65 / 100
Make sure the open source you're using is safe to use
Secure my Project

Popularity

Small

Total Weekly Downloads (121)

Dependents
0
GitHub Stars
1.76K
Forks
65
Contributors
9

The PyPI package blake2signer receives a total of 121 downloads a week. As such, we scored blake2signer popularity level to be Small.

Based on project statistics from the GitHub repository for the PyPI package blake2signer, we found that it has been starred 1,756 times, and that 0 other projects in the ecosystem are dependent on it.

The download numbers shown are the average weekly downloads from the last 6 weeks.

Security

No known security issues
Powered by Snyk

Security and license risk for latest version

Version
0.5.1 See all versions
Release Date
11/2020
Direct Vulnerabilities
  • 0
    H
  • 0
    M
  • 0
    L
Indirect Vulnerabilities
  • 0
    H
  • 0
    M
  • 0
    L
License Risk
  • 0
    H
  • 1
    M
  • 0
    L
All security vulnerabilities belong to production dependencies of direct and indirect packages.

License
MPL-2.0
Alert

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.


Security Policy
No

We found a way for you to contribute to the project! Looks like blake2signer is missing a security policy.


You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Inactive

Commit Frequency

Open Issues
13
Merged PR
4
Open PR
0
Last Commit
21 days ago

Further analysis of the maintenance status of blake2signer based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

We found that blake2signer demonstrates a positive version release cadence with at least one new version released in the past 12 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Sustainable
Readme
Yes
Contributing.md
Yes
Code of Conduct
No
Contributors
9
Funding
No

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like blake2signer is missing a Code of Conduct.


Embed Package Health Score Badge

package health: 65/100 package health 65/100

Package

Python Versions Compatibility
>=3.7,<4.0

Age
5 months
Latest Release
4 months ago
Dependencies
0
Versions
4
Maintainers
1
Wheels
OS Independent