annotatedyaml
Annotated YAML that supports secrets for Python
Decision gist · record as of 2026-08-14
Yes, with conditions. The package is actively maintained and permissively licensed, making it suitable for projects requiring YAML validation with secrets support. However, its pre-alpha status and Python 3.13-only requirement limit adoption; evaluate whether your environment supports Python 3.13 and whether pre-alpha stability is acceptable for your use case. No known vulnerabilities.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.13 or later; pyyaml, propcache, and voluptuous must be available.
- Medium install friction due to compiled wheels across multiple Python versions and platforms.
- Active maintenance with recent commits; however, the package is in pre-alpha status (Development Status :: 2) and has been in active development for less than a year, so stability is not yet established.
License · maintenance · safety
Apache-2.0 (permissive) — Licensed under Apache-2.0 (permissive), allowing use in commercial and private projects with minimal restrictions beyond attribution and liability disclaimers.
last release 2025-10-04 (314 days) · last repo commit 2026-08-10 · 3 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 412,147 downloads/mo, #6,850 on PyPI
Alternatives
Verify before relying
pip install annotatedyaml
import annotatedyaml
from voluptuous import Schema, Required
schema = Schema({Required('key'): str})
data = annotatedyaml.load(open('config.yaml'), schema=schema)- How secrets are embedded and retrieved within YAML (encryption method, storage format, or reference mechanism not detailed in excerpt)
- Whether the package integrates with Home Assistant or is usable standalone
- Performance characteristics when validating large YAML files
- Exact validation error messages and debugging experience
What it is and what it does
annotatedyaml is a YAML parser and validator for Python that combines YAML parsing with schema validation and secrets support. It wraps pyyaml for parsing and voluptuous for schema validation, allowing developers to define typed, validated configuration structures in YAML while handling sensitive data securely. The package is in pre-alpha and requires Python 3.13 or later.
The package is designed to handle configuration files that need both structural validation and the ability to reference or embed secrets. It appears to be part of the Home Assistant ecosystem but is published as a standalone library. With significant adoption, its pre-alpha status and recent release date mean the API and behavior may still evolve.
Use it for
- Validate Home Assistant configuration YAML files with type checking and schema enforcement
- Parse application config files that contain both public settings and secret references
- Define and enforce YAML schema structures using voluptuous validators in Python
- Load and validate typed configuration data from YAML with automatic error reporting
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, with conditions.
The package is actively maintained and permissively licensed, making it suitable for projects requiring YAML validation with secrets support. However, its pre-alpha status and Python 3.13-only requirement limit adoption; evaluate whether your environment supports Python 3.13 and whether pre-alpha stability is acceptable for your use case. No known vulnerabilities.
Install
annotatedyaml on PyPI
Before you install
Medium install friction due to compiled wheels across multiple Python versions and platforms. Active maintenance with recent commits; however, the package is in pre-alpha status (Development Status :: 2) and has been in active development for less than a year, so stability is not yet established.
Requires Python 3.13 or later; pyyaml, propcache, and voluptuous must be available.
License in practice
Licensed under Apache-2.0 (permissive), allowing use in commercial and private projects with minimal restrictions beyond attribution and liability disclaimers.
Quickstart
pip install annotatedyaml
import annotatedyaml
from voluptuous import Schema, Required
schema = Schema({Required('key'): str})
data = annotatedyaml.load(open('config.yaml'), schema=schema)Verify before relying
- How secrets are embedded and retrieved within YAML (encryption method, storage format, or reference mechanism not detailed in excerpt)
- Whether the package integrates with Home Assistant or is usable standalone
- Performance characteristics when validating large YAML files
- Exact validation error messages and debugging experience
Package facts
| License | Apache-2.0 permissive |
| Python support | Supports the current Python release >=3.13 |
| Install friction | Medium. Platform-specific wheel |
| Runtime dependencies | 3 packagespropcachepyyamlvoluptuous |
| Maintenance | Actively maintained 314 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 412,147 / month, #6,850 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 2 - Pre-AlphaIntended Audience :: DevelopersNatural Language :: EnglishOperating System :: OS IndependentProgramming Language :: Python :: 3.13Topic :: Software Development :: Libraries |
Evidence: annotatedyaml-1.0.2-cp313-cp313-macosx_10_13_x86_64.whl; annotatedyaml-1.0.2-cp313-cp313-macosx_11_0_arm64.whl; annotatedyaml-1.0.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl; annotatedyaml-1.0.2-cp313-cp313-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl; annotatedyaml-1.0.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl; annotatedyaml-1.0.2-cp313-cp313-manylinux_2_36_x86_64.whl; annotatedyaml-1.0.2-cp313-cp313-musllinux_1_2_aarch64.whl; annotatedyaml-1.0.2-cp313-cp313-musllinux_1_2_armv7l.whl; annotatedyaml-1.0.2-cp313-cp313-musllinux_1_2_x86_64.whl; annotatedyaml-1.0.2-cp313-cp313-win32.whl; annotatedyaml-1.0.2-cp313-cp313-win_amd64.whl; annotatedyaml-1.0.2-cp314-cp314-macosx_10_13_x86_64.whl; annotatedyaml-1.0.2-cp314-cp314-macosx_11_0_arm64.whl; annotatedyaml-1.0.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl; annotatedyaml-1.0.2-cp314-cp314-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl; annotatedyaml-1.0.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl; annotatedyaml-1.0.2-cp314-cp314-musllinux_1_2_aarch64.whl; annotatedyaml-1.0.2-cp314-cp314-musllinux_1_2_armv7l.whl; annotatedyaml-1.0.2-cp314-cp314-musllinux_1_2_x86_64.whl; annotatedyaml-1.0.2-cp314-cp314t-macosx_10_13_x86_64.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “yaml parsing with secrets”
- annotatedyamlParses and validates YAML files with support for embedded secrets and…
- sopsySOPSy wraps the SOPS command-line tool to encrypt, decrypt, and…
- envyamlParses YAML configuration files with environment variable…
Give your agent the search over MCP, or paste the wish link into any chat.
More Libraries packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
Pluggy provides a plugin system that lets you define hook specifications and register implementations to be called in sequence, enabling extensible Python applications without tight coupling.
Install it if you're building an extensible application or framework.
Provides parsing, arithmetic, and recurrence rule computation for dates and times, with timezone support and iCalendar RFC compliance.
Install it if you need to parse flexible date strings, compute relative dates, handle timezones, or work with recurrence rules—it's the de facto choice for these tasks.
Six provides utility functions to write Python code that runs on both Python 2.7 and Python 3.3+, smoothing over language differences between the two versions.
pytest is a testing framework that lets you write test functions using plain assert statements and automatically discovers and runs them, with detailed failure reporting.
See also yamale · pyaml-env · pykwalify · valohai-yaml · strictyaml · saneyaml · sphinxcontrib-autoyaml · yamlpath · zcbor · validate-pyproject-schema-store