{"categories":[{"label":"Software Development","url":"https://skillfed.io/packages/category/software-development/15"},{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/18"},{"label":"Utilities","url":"https://skillfed.io/packages/category/utilities/9"},{"label":"Software Distribution","url":"https://skillfed.io/packages/category/system-software-distribution"}],"enrichment":{"capability":"pkginfo2 reads and parses package metadata from source distributions, wheels, and installed packages without executing arbitrary code.","skillfed_tags":["metadata-extraction","safe-inspection"],"use_cases":["Build tools and package managers that need to inspect package metadata before installation.","Dependency analyzers that extract metadata from sdists or wheels without executing setup code.","Package indexing systems that parse PKG-INFO from distributions in a controlled, safe manner.","Development tools that query installed package metadata from dist-info or egg-info directories.","CI/CD pipelines that validate package metadata without importing or running package code."],"what_it_does":"pkginfo2 is a metadata extraction library that safely reads package information from Python distributions\u2014sdists, wheels, egg-info directories, and dist-info folders\u2014without importing or executing code. It parses the PKG-INFO file and related metadata structures to expose distutils metadata fields as a queryable API.\n\nThe package is a fork of the original pkginfo that removes the ability to import and evaluate arbitrary code, making it safer for tools that need to inspect package metadata without triggering side effects. It targets modern Python versions and is intended for build tools, package managers, and metadata inspection utilities that need reliable, code-free access to distribution metadata.","worth_installing":"Yes, if you need safe, code-free package metadata extraction. Low install friction, no runtime dependencies, and a permissive license make it straightforward to adopt. The aging maintenance status is a minor concern but not a blocker for a stable, focused utility. Not necessary if you only work with installed packages via other metadata tools."},"id":"pkginfo2","links":{"html":"https://skillfed.io/packages/pkginfo2","md":"https://skillfed.io/packages/pkginfo2.md","pypi":"https://pypi.org/project/pkginfo2/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2025-10-27","license_spdx":null,"license_treatment":"permissive","name":"pkginfo2","python_support":"supports_current","summary":"Query metadata from sdists / bdists / installed packages. Safer fork of pkginfo to avoid doing arbitrary imports and eval."},"popularity":{"monthly_downloads":130690,"position":11631,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"30.1.0"}