View tlslite-ng on Snyk Open Source Advisor

Package Health Score

75 / 100

security
Security review needed
popularity
Recognized
maintenance
Healthy
community
Active

Explore Similar Packages

ws
39

Popularity

Recognized

GitHub Stars: 239
Forks: 81
Contributors: 40

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package tlslite-ng, we found that it has been starred 239 times.

Security

Security review needed

Security and license risk for latest version

Release Date: Dec 17, 2024
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
1
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

LGPL-2.0

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.

Security Policy

Yes

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Healthy

Commit Frequency

Open Issues: 57
Open PR: 8
Last Release: 8 days ago
Last Commit: 7 days ago

Further analysis of the maintenance status of tlslite-ng based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that tlslite-ng demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Active

Readme: Yes
Contributing.md: Yes
Code of Conduct: No
Contributors: 40
Funding: No

With more than 10 contributors for the tlslite-ng repository, this is possibly a sign for a growing and inviting community.

We found a way for you to contribute to the project! Looks like tlslite-ng is missing a Code of Conduct.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: !=3.0.*,!=3.1.*,!=3.2.*,!=3.3.*,!=3.4.*,!=3.5.*,>=2.6

Age: 9 years
Latest Release: 8 days ago
Dependencies: 0 Direct
Versions: 87
Maintainers: 0
Wheels: OS Independent

Readme

tlslite-ng is a pure python implementation of SSLv3.0, TLS 1.0, TLS 1.1, TLS 1.2 and TLS 1.3 protocols.

It can use pycrypto, m2crypto and gmp for acceleration of cryptographic operations but is not dependant upon them.

Functionality implemented include:

all above mentioned protocols, including support for client certificates (RFC 6101, RFC 2246, RFC 4346, RFC 5246, RFC 8446 - not complete)
RSA, RSA-PSS, DSA, and ECDSA certificates
RC4, 3DES-CBC, AES-CBC, AES-GCM, AES-CCM, AES-CCM_8 and ChaCha20 ciphers (RFC 5246, RFC 6347, RFC 4492, RFC 5288, RFC 5289, RFC 7539, RFC 7905, RFC 6655, RFC 7251)
MD5, SHA1, SHA256 and SHA384 HMACs as well as AEAD mode of operation with GCM or Poly1305 authenticator
RSA, DHE_RSA, DHE_DSS, ECDHE_RSA, ECDHE_ECDSA key exchange
full set of signature hashes (md5, sha1, sha224, sha256, sha384, sha512, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384 and rsa_pss_rsae_sha512) for ServerKeyExchange and CertfificateVerify
secp256r1, secp384r1, secp521r1, secp256k1, secp224r1 and secp192r1 curves for ECDHE key exchange (support for last two depends on the version of ecdsa library used)
x25519 and x448 curves for ECDHE key exchage (RFC 7748. RFC 4492bis)
anonymous DHE key exchange
anonymous ECDH key exchange
PSK and PSK-DH key exchange in TLS 1.3
session ticket based resumption (RFC 5077) and in TLS 1.3
post-handshake client authentication in TLS 1.3
NULL encryption ciphersuites
FALLBACK_SCSV (RFC 7507)
encrypt-then-MAC mode of operation for CBC ciphersuites (RFC 7366)
TACK certificate pinning
SRP_SHA_RSA and SRP_SHA ciphersuites (RFC 5054)
Extended Master Secret calculation for TLS connections (RFC 7627)
padding extension (RFC 7685)
Keying material exporter (RFC 5705)
Next Protocol Negotiation
Application-Layer Protocol Negotiation Extension (RFC 7301)
FFDHE prime/group negotiation (RFC 7919)
Heartbeat Extension (RFC 6520)
Record Size Limit (RFC 8449)
TLS Certificate Compression (RFC 8879)
Hybrid ML-KEM key exchage groups (draft-kwiatkowski-tls-ecdhe-mlkem-02)
support for Brainpool curves in TLS 1.2 and TLS 1.3

tlslite-ng aims to be a drop-in replacement for tlslite while providing more comprehensive set of features and more secure defaults.

FAQs

What is tlslite-ng?

Pure python implementation of SSL and TLS. Visit Snyk Advisor to see a full health score report for tlslite-ng, including popularity, security, maintenance & community analysis.

Is tlslite-ng popular?

The python package tlslite-ng receives a total of 20,914 weekly downloads. As such, tlslite-ng popularity was classified as a recognized. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is tlslite-ng well maintained?

We found that tlslite-ng demonstrated a healthy version release cadence and project activity. It has a community of 40 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is tlslite-ng safe to use?

While scanning the latest version of tlslite-ng, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 25 December-2024, at 14:41 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

tlslite-ng

Pure python implementation of SSL and TLS. For more information about how to use this package see README

Ensure you're using the healthiest python packages

Package Health Score

Explore Similar Packages

Popularity

Direct Usage Popularity

Security

Security and license risk for latest version

Non-Permissive License

Maintenance

Commit Frequency

Community

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Package

Readme

FAQs

What is tlslite-ng?

Is tlslite-ng popular?

Is tlslite-ng well maintained?

Is tlslite-ng safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Explore Similar Packages

Direct Usage Popularity

Security and license risk for latest version

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Readme

FAQs

What is tlslite-ng?

Is tlslite-ng popular?

Is tlslite-ng well maintained?

Is tlslite-ng safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues