{"categories":[{"label":"Internet","url":"https://skillfed.io/packages/category/internet/5"},{"label":"Security","url":"https://skillfed.io/packages/category/security/3"}],"enrichment":{"capability":"Provides a safer subclass of Python's standard netrc parser that enforces strict file permissions and supports custom netrc file paths via environment variable.","skillfed_tags":["credentials","authentication","security-hardening"],"use_cases":["Secure credential lookup in CLI tools or scripts that need to authenticate with remote services using netrc files.","Enforcing strict file permissions on credential files to prevent accidental exposure of passwords.","Allowing deployment scripts to override the default netrc location via NETRC environment variable for non-standard configurations.","Backporting secure netrc parsing to Python 3.7\u20133.9 environments where standard library behavior may differ.","Validating netrc file permissions in security-sensitive applications before attempting to read credentials."],"what_it_does":"Safe-netrc is a drop-in replacement for Python's standard library netrc parser that adds stricter security and flexibility. It extends the netrc.netrc class to enforce file permissions checks and allows the netrc file path to be specified via the NETRC environment variable instead of always defaulting to ~/.netrc. The package backports permission validation that was added to the standard library in Python 3.1, ensuring consistent security behavior across Python versions.\n\nThe package is intended for applications that need to read authentication credentials from netrc files while maintaining strict security posture. It has no external runtime dependencies and installs as a pure Python wheel, making it lightweight and portable. However, the project is no longer actively maintained\u2014the last release was in November 2022.","worth_installing":"Yes, if you need secure netrc parsing with strict permissions checks and environment-variable path override in a Python 3.7+ application. The package is stable and has no known vulnerabilities, but be aware it is abandoned and will not receive updates. Use it only if the current behavior meets your needs and you do not expect future maintenance."},"id":"safe-netrc","links":{"html":"https://skillfed.io/packages/safe-netrc","md":"https://skillfed.io/packages/safe-netrc.md","pypi":"https://pypi.org/project/safe-netrc/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2022-11-29","license_spdx":null,"license_treatment":"copyleft","name":"safe-netrc","python_support":"supports_current","summary":"Safe netrc file parser"},"popularity":{"monthly_downloads":93230,"position":13397,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.0.1"}
