Package Health Score

83 / 100

security
Security review needed
popularity
Influential project
maintenance
Sustainable
community
Active

Popularity

Influential project

Total Weekly Downloads (106,465)

GitHub Stars: 2.94K
Forks: 765
Contributors: 220

Direct Usage Popularity

The PyPI package django-oauth-toolkit receives a total of 106,465 downloads a week. As such, we scored django-oauth-toolkit popularity level to be Influential project.

Based on project statistics from the GitHub repository for the PyPI package django-oauth-toolkit, we found that it has been starred 2,943 times.

The download numbers shown are the average weekly downloads from the last 6 weeks.

Security

Security review needed

Security and license risk for latest version

Release Date: May 31, 2023
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
1
M
0
L
License Risk: 0
H
2
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

BSD-2-Clause

Security Policy

We found a way for you to contribute to the project! Looks like django-oauth-toolkit is missing a security policy.

A security vulnerability was detected in an indirect dependency that is added to your project when the latest version of django-oauth-toolkit is installed.

We highly advise you to review these security issues.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Fix it in your project with Snyk!

Maintenance

Sustainable

Commit Frequency

Open Issues: 151
Open PR: 12
Last Release: 6 months ago
Last Commit: 8 days ago

Further analysis of the maintenance status of django-oauth-toolkit based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

We found that django-oauth-toolkit demonstrates a positive version release cadence with at least one new version released in the past 12 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Active

Readme: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 220
Funding: Yes

A good and healthy external contribution signal for django-oauth-toolkit project, which invites more than one hundred open source maintainers to collaborate on the repository.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: ==3.10.*, ==3.11.*, ==3.7.*, ==3.8.*, ==3.9.*

Age: 11 years
Latest Release: 6 months ago
Dependencies: N/A
Versions: 43
Maintainers: 5
Wheels: OS Independent

Readme

Django OAuth Toolkit

OAuth2 goodies for the Djangonauts!

If you are facing one or more of the following:

Your Django app exposes a web API you want to protect with OAuth2 authentication,
You need to implement an OAuth2 authorization server to provide tokens management for your infrastructure,

Django OAuth Toolkit can help you providing out of the box all the endpoints, data and logic needed to add OAuth2 capabilities to your Django projects. Django OAuth Toolkit makes extensive use of the excellent OAuthLib, so that everything is rfc-compliant.

Reporting security issues

Please report any security issues to the JazzBand security team at <>. Do not file an issue on the tracker.

Requirements

Python 3.7+
Django 2.2, 3.2, 4.0 (4.0.1+ due to a regression), 4.1, or 4.2
oauthlib 3.1+

Installation

Install with pip:

pip install django-oauth-toolkit

Add oauth2_provider to your INSTALLED_APPS

INSTALLED_APPS = (
    ...
    'oauth2_provider',
)

If you need an OAuth2 provider you'll want to add the following to your urls.py. Notice that oauth2_provider namespace is mandatory.

urlpatterns = [
    ...
    path('o/', include('oauth2_provider.urls', namespace='oauth2_provider')),
]

Changelog

See CHANGELOG.md.

Documentation

The full documentation is on Read the Docs.

License

django-oauth-toolkit is released under the terms of the BSD license. Full details in LICENSE file.

Help Wanted

We need help maintaining and enhancing django-oauth-toolkit (DOT).

Join the team

Please consider joining Jazzband (If not already a member) and the DOT project team.

How you can help

See our contributing info and the open issues and PRs, especially those labeled help-wanted.

Submit PRs and Perform Reviews

PR submissions and reviews are always appreciated! Since we require an independent review of any PR before it can be merged, having your second set of eyes looking at PRs is extremely valuable.

Please don’t merge PRs

Please be aware that we don’t want every Jazzband member to merge PRs but just a handful of project team members so that we can maintain a modicum of control over what goes into a release of this security oriented code base. Only project leads are able to publish releases to Pypi and it becomes difficult when creating a new release for the leads to deal with “unexpected” merged PRs.

Become a Project Lead

If you are interested in stepping up to be a Project Lead, please join the discussion.

FAQs

What is django-oauth-toolkit?

OAuth2 Provider for Django. Visit Snyk Advisor to see a full health score report for django-oauth-toolkit, including popularity, security, maintenance & community analysis.

Is django-oauth-toolkit popular?

The python package django-oauth-toolkit receives a total of 106,465 weekly downloads. As such, django-oauth-toolkit popularity was classified as an influential project. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is django-oauth-toolkit well maintained?

We found indications that django-oauth-toolkit maintenance is sustainable demonstrating some project activity. We saw a total of 220 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is django-oauth-toolkit safe to use?

While scanning the latest version of django-oauth-toolkit, we found that a security review is needed. A total of 1 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 5 December-2023, at 02:30 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

Package Health Score

Total Weekly Downloads (106,465)

Direct Usage Popularity

Security and license risk for latest version

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Readme

Django OAuth Toolkit

Reporting security issues

Requirements

Installation

Changelog

Documentation

License

Help Wanted

Join the team

How you can help

Submit PRs and Perform Reviews

Please don’t merge PRs

Become a Project Lead

FAQs

What is django-oauth-toolkit?

Is django-oauth-toolkit popular?

Is django-oauth-toolkit well maintained?

Is django-oauth-toolkit safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues