{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Serializes and deserializes STIX 2 JSON content, providing Python APIs for creating, parsing, and manipulating cyber threat intelligence objects with support for data markings, versioning, and ID resolution across multiple sources.","skillfed_tags":["threat-intelligence","stix-standard","cti"],"use_cases":["Parse STIX JSON feeds from threat intelligence platforms and convert them into Python objects for analysis.","Create and serialize malware indicators, attack patterns, or campaign objects for sharing with other security tools.","Build a threat intelligence ingestion pipeline that normalizes data from multiple CTI sources into STIX format.","Validate and version STIX objects as part of a security data management workflow.","Integrate threat intelligence data into a security information and event management (SIEM) or incident response system."],"what_it_does":"stix2 is a Python library for working with STIX 2 (Structured Threat Information Expression), the OASIS standard format for representing and sharing cyber threat intelligence. It provides APIs to construct STIX objects (like indicators, malware, campaigns) by passing keyword arguments to constructors, parse STIX JSON strings into Python objects, and serialize objects back to JSON. The library supports STIX 2.1 at the Committee Specification level and handles common CTI tasks including object versioning, data markings, and resolving STIX identifiers across multiple data sources.\n\nThe package depends on pytz for timezone handling, requests for HTTP operations, simplejson for JSON serialization, and stix2-patterns for pattern validation. It is maintained as an OASIS TC Open Repository with BSD-3-Clause licensing, meaning contributions are open to the community. The library supports modern Python versions (3.10 through 3.14) and is positioned for developers building threat intelligence systems, security platforms, or tools that need to consume or produce standardized CTI data.","worth_installing":"Yes, if you work with STIX 2 threat intelligence data. The library has low install friction, no known vulnerabilities, permissive licensing, and active maintenance from OASIS-backed maintainers. The aging status reflects stable maturity rather than abandonment\u2014recent commits and community governance are present. Install it if you need to produce, consume, or transform STIX 2 JSON in a Python application; skip it if you don't work with CTI standards."},"id":"stix2","links":{"html":"https://skillfed.io/packages/stix2","md":"https://skillfed.io/packages/stix2.md","pypi":"https://pypi.org/project/stix2/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2026-02-12","license_spdx":null,"license_treatment":"permissive","name":"stix2","python_support":"supports_current","summary":"Produce and consume STIX 2 JSON content"},"popularity":{"monthly_downloads":1790694,"position":3556,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"3.0.2"}