configobj
Config file reading, writing and validation.
Decision gist · record as of 2026-08-14
Yes. ConfigObj is a stable, actively maintained library with zero known vulnerabilities, low install friction, and a permissive license. It solves a well-defined problem—INI file handling with validation—and is widely used. Install it if your application needs configuration file support; the lack of dependencies makes it a lightweight choice.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.7 or later (supports 3.7 through 3.12)
- Low install friction with no runtime dependencies.
- Actively maintained with recent security fix (CVE-2023-26112 in 5.0.9) and last commit 2026-08-01.
License · maintenance · safety
BSD-3-Clause (permissive) — BSD-3-Clause permissive license allows commercial and private use with minimal restrictions; suitable for most projects.
last release 2024-09-21 (692 days) · last repo commit 2026-08-01 · 338 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 7,158,377 downloads/mo, #1,778 on PyPI
Alternatives
Verify before relying
pip install configobj
from configobj import ConfigObj
config = ConfigObj('settings.ini')
config['section']['key'] = 'value'
config.write()- Whether the ReDoS fix in 5.0.9 affects existing validation patterns or performance
- Specific validation system capabilities beyond type checking and defaults mentioned
What it is and what it does
ConfigObj is a mature configuration file library that reads and writes INI-format files with a focus on ease of use and round-trip fidelity—it preserves comments and key order. It handles nested sections to arbitrary depth, list values, multiline values, and full Unicode. The library includes a validation subsystem with automatic type conversion, default values, and support for repeated sections. It also offers an unrepr mode for serializing and deserializing Python data types.
The package is designed for developers who need straightforward configuration management without complex dependencies. It's commonly used in system administration tools, application configuration, and any context where INI files are the preferred format. Recent versions dropped Python 2 support and patched a ReDoS vulnerability.
Use it for
- Reading and writing application configuration files in INI format with automatic preservation of comments and structure
- Validating configuration values with automatic type conversion and default fallbacks during application startup
- Building admin tools or sysadmin utilities that need to parse and modify INI-based config files
- Storing nested configuration hierarchies in a human-readable format that users can edit directly
- Serializing Python data structures into config files and deserializing them back via unrepr mode
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes.
ConfigObj is a stable, actively maintained library with zero known vulnerabilities, low install friction, and a permissive license. It solves a well-defined problem—INI file handling with validation—and is widely used. Install it if your application needs configuration file support; the lack of dependencies makes it a lightweight choice.
Install
configobj on PyPI
Before you install
Low install friction with no runtime dependencies. Actively maintained with recent security fix (CVE-2023-26112 in 5.0.9) and last commit 2026-08-01.
Requires Python 3.7 or later (supports 3.7 through 3.12)
License in practice
BSD-3-Clause permissive license allows commercial and private use with minimal restrictions; suitable for most projects.
Quickstart
pip install configobj
from configobj import ConfigObj
config = ConfigObj('settings.ini')
config['section']['key'] = 'value'
config.write()Verify before relying
- Whether the ReDoS fix in 5.0.9 affects existing validation patterns or performance
- Specific validation system capabilities beyond type checking and defaults mentioned
Package facts
| License | BSD-3-Clause permissive |
| Python support | Supports the current Python release >=3.7 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | None |
| Maintenance | Actively maintained 692 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 7,158,377 / month, #1,778 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 6 - MatureIntended Audience :: DevelopersLicense :: OSI Approved :: BSD LicenseOperating System :: OS IndependentProgramming Language :: PythonProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.7Programming Language :: Python :: 3.8Programming Language :: Python :: 3.9Topic :: Software Development :: LibrariesTopic :: Software Development :: Libraries :: Python Modules |
Evidence: configobj-5.0.9-py2.py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “ini file reader writer”
- configobjConfigObj reads, writes, and validates INI-format configuration files…
- INIToolsINITools parses and manipulates INI-style configuration files through…
- iniconfiginiconfig parses INI configuration files while preserving section and…
Give your agent the search over MCP, or paste the wish link into any chat.
More Libraries packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
Pluggy provides a plugin system that lets you define hook specifications and register implementations to be called in sequence, enabling extensible Python applications without tight coupling.
Install it if you're building an extensible application or framework.
Provides parsing, arithmetic, and recurrence rule computation for dates and times, with timezone support and iCalendar RFC compliance.
Install it if you need to parse flexible date strings, compute relative dates, handle timezones, or work with recurrence rules—it's the de facto choice for these tasks.
Six provides utility functions to write Python code that runs on both Python 2.7 and Python 3.3+, smoothing over language differences between the two versions.
pytest is a testing framework that lets you write test functions using plain assert statements and automatically discovers and runs them, with detailed failure reporting.
See also commented-configparser · iniparse · ConfigUpdater · configparser2 · click-config-file · click-configfile · pyconfigurator · iniconfig · imperfect · kvf