tink

v1.10.0

A multi-language, cross-platform library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse. For more information about how to use this package see README

Latest version published 7 months ago

License: Apache-2.0

PyPI

GitHub

Package Health Score

74 / 100

security
No known security issues
popularity
Popular
maintenance
Sustainable
community
Sustainable

Explore Similar Packages

Popularity

Popular

GitHub Stars: 45
Forks: 4
Contributors: 20

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package tink, we found that it has been starred 45 times.

Security

No known security issues

Security and license risk for latest version

Release Date: May 2, 2024
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
0
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

Apache-2.0

Security Policy

Yes

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Sustainable

Commit Frequency

Open Issues: 6
Open PR: 1
Last Release: 7 months ago
Last Commit: 18 days ago

Further analysis of the maintenance status of tink based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

We found that tink demonstrates a positive version release cadence with at least one new version released in the past 12 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Sustainable

Readme: Yes
Contributing.md: Yes
Code of Conduct: No
Contributors: 20
Funding: No

With more than 10 contributors for the tink repository, this is possibly a sign for a growing and inviting community.

We found a way for you to contribute to the project! Looks like tink is missing a Code of Conduct.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: >=3.8

Age: 4 years
Latest Release: 7 months ago
Dependencies: 0 Direct
Versions: 8
Maintainers: 4
Wheels: Linux, macOS, Windows

Not sure how to use tink?

To help you get started, we've collected the most common ways that tink is being used within popular public projects.

google / tink / tools / testing / python / aead_cli.py View on Github

def read_keyset(keyset_filename):
  """Load a keyset from a file.

  Args:
    keyset_filename: A path to a keyset file

  Returns:
    A KeysetHandle of the file's keyset
  Raises:
    TinkError: if the file is not valid
    IOError: if the file does not exist
  """
  with open(keyset_filename, 'rb') as keyset_file:
    text = keyset_file.read()
    keyset = cleartext_keyset_handle.CleartextKeysetHandle(
        tink.BinaryKeysetReader(text).read())
  return keyset

View more ways to use tink

Tink Python

Test	GCP Ubuntu (aarch64)	MacOS	GCP Windows
Bazel	N/A
Bazel (with KMS)	N/A		N/A
Pip	N/A
Pip (with KMS)	N/A		N/A
Bdist (Create + Test)
Sdist (Create)	N/A	N/A	N/A
Sdist (Test)	N/A	N/A	N/A

Using crypto in your application shouldn't have to feel like juggling chainsaws in the dark. Tink is a crypto library written by a group of cryptographers and security engineers at Google. It was born out of our extensive experience working with Google's product teams, fixing weaknesses in implementations, and providing simple APIs that can be used safely without needing a crypto background.

Tink provides secure APIs that are easy to use correctly and hard(er) to misuse. It reduces common crypto pitfalls with user-centered design, careful implementation and code reviews, and extensive testing. At Google, Tink is one of the standard crypto libraries, and has been deployed in hundreds of products and systems.

To get a quick overview of Tink's design please take a look at Tink's goals.

The official documentation is available at https://developers.google.com/tink.

Contact and mailing list

If you want to contribute, please read CONTRIBUTING and send us pull requests. You can also report bugs or file feature requests.

If you'd like to talk to the developers or get notified about major product updates, you may want to subscribe to our mailing list.

Maintainers

Tink is maintained by (A-Z):

Moreno Ambrosin
Taymon Beal
William Conner
Thomas Holenstein
Stefan Kölbl
Charles Lee
Cindy Lin
Fernando Lobato Meeser
Ioana Nedelcu
Sophie Schmieg
Elizaveta Tretiakova
Jürg Wullschleger

Alumni:

Haris Andrianakis
Daniel Bleichenbacher
Tanuj Dhir
Thai Duong
Atul Luykx
Rafael Misoczki
Quan Nguyen
Bartosz Przydatek
Enzo Puig
Laurent Simon
Veronika Slívová
Paula Vidas

FAQs

What is tink?

A multi-language, cross-platform library that provides cryptographic APIs that are secure, easy to use correctly, and h... Visit Snyk Advisor to see a full health score report for tink, including popularity, security, maintenance & community analysis.

Is tink popular?

The python package tink receives a total of 107,074 weekly downloads. As such, tink popularity was classified as a popular. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is tink well maintained?

We found indications that tink maintenance is sustainable demonstrating some project activity. We saw a total of 20 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is tink safe to use?

The python package tink was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 22 November-2024, at 02:13 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP