{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"Exposes the Starlark interpreter (a Python-like language) to Python via PyO3 bindings, enabling sandboxed execution of untrusted code with deterministic, hermetic evaluation.","skillfed_tags":["sandboxing","dsl","rust-binding"],"use_cases":["Execute untrusted user scripts or plugins safely without filesystem or network access","Implement a configuration or domain-specific language (DSL) that is Python-like but deterministic and sandboxed","Build system or task automation where reproducibility and parallel evaluation are required","Evaluate expressions or code snippets from external sources with guaranteed hermetic isolation","Prototyping or embedding a restricted scripting layer in a larger Python application"],"what_it_does":"Starlark-pyo3 wraps the starlark-rust interpreter, bringing Starlark\u2014a Python-like language designed for safe, deterministic execution\u2014into Python. Starlark is built around hermetic execution (no filesystem, network, or clock access), deterministic evaluation (same code always produces the same result), and parallel-safe immutable data. This makes it suitable for running untrusted code safely, configuration languages, and build system scripting.\n\nThe package provides Python bindings via PyO3, so you can instantiate a Starlark interpreter from Python and evaluate Starlark code within a sandboxed context. It ships with prebuilt wheels for Linux (x86_64, aarch64, armv7l), Windows, and macOS, making installation straightforward. The single runtime dependency is typing-extensions, keeping the footprint minimal.","worth_installing":"Yes, if you need sandboxed, deterministic code execution with a Python-like syntax. The package is actively maintained, has no known vulnerabilities, and offers prebuilt wheels for easy installation. However, verify the license terms first\u2014the package metadata does not declare an explicit license, which could be a blocker for commercial or restricted-license projects. Start with the documentation and a small proof-of-concept to confirm the API and performance meet your use case."},"id":"starlark-pyo3","links":{"html":"https://skillfed.io/packages/starlark-pyo3","md":"https://skillfed.io/packages/starlark-pyo3.md","pypi":"https://pypi.org/project/starlark-pyo3/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-05-18","license_spdx":null,"license_treatment":"unclear","name":"starlark-pyo3","python_support":"supports_current","summary":"Wraps starlark-rust into Python"},"popularity":{"monthly_downloads":356691,"position":7280,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"2026.1"}
