{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Validates the syntax of STIX 2 Pattern expressions used in cyber threat intelligence to describe observable conditions, available as both a command-line tool and Python library.","skillfed_tags":["threat-intelligence","stix-cti","syntax-validation"],"use_cases":["Validate STIX patterns in a threat intelligence platform before storing or distributing them to ensure they are well-formed.","Integrate pattern validation into a security tool's data pipeline to reject malformed observable conditions early.","Build a CTI data quality checker that scans threat feeds for syntactically invalid STIX patterns.","Test STIX pattern expressions programmatically in unit tests for threat detection rules or detection-as-code systems.","Provide pattern syntax validation as part of a threat intelligence data ingestion workflow."],"what_it_does":"stix2-patterns is a validator for STIX 2 Pattern expressions\u2014the formal language used in cyber threat intelligence to describe observable conditions that indicate threat activity. It parses pattern syntax against an ANTLR grammar and reports whether a given pattern is well-formed. The package is maintained by the OASIS Cyber Threat Intelligence Technical Committee and can be used either as a standalone command-line tool or imported into Python applications to programmatically validate patterns.\n\nThe validator's main dependency is antlr4-python3-runtime, which provides the parser infrastructure. It supports Python 3.10 and later, with a development status of Alpha. The tool is useful for anyone building CTI systems, threat feeds, or security applications that need to ensure pattern expressions are syntactically correct before processing them downstream.","worth_installing":"Yes, with conditions. The package fills a specific need for STIX 2 Pattern validation in CTI workflows and has no known vulnerabilities. However, the aging maintenance status (184 days since last release) and Alpha development status mean you should verify that it handles your specific pattern syntax correctly and be prepared to maintain a fork if critical bugs emerge. Suitable for production use in established CTI systems where pattern validation is a non-critical component."},"id":"stix2-patterns","links":{"html":"https://skillfed.io/packages/stix2-patterns","md":"https://skillfed.io/packages/stix2-patterns.md","pypi":"https://pypi.org/project/stix2-patterns/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2026-02-11","license_spdx":null,"license_treatment":"permissive","name":"stix2-patterns","python_support":"supports_current","summary":"Validate STIX 2 Patterns."},"popularity":{"monthly_downloads":1856469,"position":3488,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"2.1.2"}