{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"Python bindings for creating osquery extensions and querying osquery instances via SQL, allowing you to extend osquery with custom tables or execute queries against running osquery processes.","skillfed_tags":["osquery","system-monitoring","sql-queries"],"use_cases":["Build custom osquery table plugins in Python to expose internal APIs or proprietary data as queryable tables.","Execute SQL queries against a running osqueryd daemon from a Python application to gather system state or security telemetry.","Spawn ephemeral osquery instances from Python for one-off or batch system queries without managing a separate osquery process.","Integrate osquery into Python-based security monitoring or incident response workflows via the Thrift client API.","Extend osquery with Python logic for specialized hardware events, file hashing, or custom system introspection."],"what_it_does":"osquery-python is the official Python API for osquery, which exposes an operating system as a queryable relational database. It provides two main capabilities: creating custom osquery extensions by implementing table plugins in Python, and executing SQL queries against osquery instances (either spawned ephemeral processes or existing osqueryd daemons) via Thrift bindings.\n\nThe package depends on thrift for RPC communication, future for Python 2/3 compatibility, and pywin32 for Windows support. It is designed for system administrators and security engineers who want to extend osquery's functionality or integrate osquery queries into Python applications. The dormant maintenance status (751 days since last release) means the package is stable but receives no active development.","worth_installing":"Yes, if you are already using osquery and need Python bindings to extend it or query it programmatically. The low install friction and permissive license are favorable. However, be aware that maintenance is dormant\u2014no active development or bug fixes are expected\u2014and the classifiers only list Python up to 3.6, so compatibility with newer Python versions is unverified. Use it for stable, established osquery deployments, not for new projects expecting ongoing support."},"id":"osquery","links":{"html":"https://skillfed.io/packages/osquery","md":"https://skillfed.io/packages/osquery.md","pypi":"https://pypi.org/project/osquery/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2024-07-24","license_spdx":null,"license_treatment":"permissive","name":"osquery","python_support":"unspecified","summary":"Osquery Python API"},"popularity":{"monthly_downloads":231903,"position":9077,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"3.1.1"}