{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"Parses, manipulates, and generates STIX v1.2.0 (Structured Threat Information eXpression) content in Python, enabling programmatic work with threat intelligence data structures.","skillfed_tags":["threat-intelligence","stix-legacy","xml-parsing"],"use_cases":["Parse STIX v1.2.0 XML threat intelligence feeds from external sources into Python objects for analysis.","Programmatically construct STIX packages describing campaigns, threat actors, and indicators for export to legacy systems.","Convert threat data between STIX and other formats by leveraging the library's object model as an intermediate representation.","Integrate STIX threat intelligence into legacy security tools or workflows that depend on v1.2.0 compatibility.","Extract and manipulate individual STIX constructs (indicators, exploit targets, TTPs) from larger documents."],"what_it_does":"python-stix is a library for working with STIX v1.2.0, a standardized XML-based format for expressing and sharing structured threat intelligence. It provides Python APIs to read STIX documents from XML, construct threat objects programmatically (campaigns, indicators, threat actors, incidents, and other STIX constructs), and serialize them back to XML. The library depends on lxml for XML handling, cybox for cyber observable data, mixbox for common utilities, and python-dateutil for timestamp handling.\n\nThe package is production-stable but abandoned\u2014its last release was November 2020 and the repository received its final commit in November 2021. It remains suitable for parsing and generating existing STIX v1.2.0 content in established workflows, but it will not evolve to support newer STIX versions or adapt to future Python ecosystem changes. Use it only if your threat intelligence pipeline is locked to STIX v1.2.0 and you have no migration path to newer standards.","worth_installing":"Yes, but only for legacy STIX v1.2.0 workflows. The package is stable, has low install friction, carries no license restrictions, and has no known vulnerabilities. However, it is abandoned and will not receive updates. Install it if your threat intelligence pipeline is committed to STIX v1.2.0 and you cannot migrate to a maintained alternative. Do not install it for new projects\u2014evaluate whether STIX 2.0+ or a maintained STIX library is available for your use case."},"id":"stix","links":{"html":"https://skillfed.io/packages/stix","md":"https://skillfed.io/packages/stix.md","pypi":"https://pypi.org/project/stix/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2020-11-16","license_spdx":null,"license_treatment":"permissive","name":"stix","python_support":"unspecified","summary":"An API for parsing and generating STIX content."},"popularity":{"monthly_downloads":121365,"position":11984,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.2.0.11"}