{"categories":[{"label":"Utilities","url":"https://skillfed.io/packages/category/utilities/10"}],"enrichment":{"capability":"pypickle wraps Python's pickle module to save and load serialized data with built-in validation and safety checks against risky modules before deserialization.","skillfed_tags":["security","serialization","data-persistence"],"use_cases":["Loading pickled machine learning models from untrusted sources while blocking dangerous module imports","Saving application state or cached data with filesystem safety checks to prevent overwrites to system paths","Validating pickle files before processing in data pipelines to catch potentially malicious payloads","Sharing serialized Python objects between services with explicit module whitelisting for security"],"what_it_does":"pypickle is a wrapper around Python's pickle module that adds security-first validation before loading serialized data. It classifies modules as high-risk (like `os`, `sys`) and blocks them by default unless explicitly allowed, preventing arbitrary code execution from untrusted pickle files. The library provides `save()` and `load()` functions alongside utility methods to check critical filesystem paths and identify risky modules within a pickle.\n\nThe package targets developers who need to persist Python objects\u2014models, session data, configuration\u2014but want protection against pickle deserialization exploits. It requires Python 3+ and has no external dependencies, making it a lightweight drop-in for projects already using pickle.","worth_installing":"Yes, if you load pickle files from any source you don't fully control. The validation layer adds meaningful protection against a real pickle deserialization threat without breaking standard workflows. No security vulnerabilities on record, low friction, and active maintenance. Skip it only if you never deserialize untrusted pickles or have already implemented equivalent validation."},"id":"pypickle","links":{"html":"https://skillfed.io/packages/pypickle","md":"https://skillfed.io/packages/pypickle.md","pypi":"https://pypi.org/project/pypickle/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-13","license_spdx":"MIT","license_treatment":"permissive","name":"pypickle","python_support":"supports_current","summary":"pypickle is a Python library to save and load variables in pickle files."},"popularity":{"monthly_downloads":94268,"position":13336,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"2.0.2"}