skillfed

mixbox

Utility library for cybox, maec, and stix packages

mixbox v1.0.5 122.8K downloads/30d#11,929 on PyPI8
Permissive license DORMANT released

What it is and what it does

Mixbox is a utility library that provides shared code for three related Python packages in the cybersecurity domain: python-cybox, python-maec, and python-stix. It handles common data structures, serialization logic, and XML processing that these threat intelligence frameworks rely on. The package depends on lxml for XML handling, python-dateutil for date operations, ordered-set for ordered collections, and weakrefmethod for weak reference support.

The library is in production/stable status but has been dormant since late 2020, with no releases or commits for several years. It remains in the top 15000 PyPI packages by download volume, suggesting it is still used as a transitive dependency by downstream security tools. However, its age and lack of active maintenance mean it carries the risk of compatibility issues with newer Python versions or dependency updates.

Use it for:

  • Building threat intelligence tools that depend on python-cybox, python-maec, or python-stix frameworks.
  • Developing cybersecurity analysis platforms that need shared data serialization and XML handling utilities.
  • Contributing to or extending existing CybOX, MAEC, or STIX-based security projects that rely on mixbox internals.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Mixbox provides shared utility code for cybersecurity and threat intelligence libraries, handling common data structures and serialization logic used by python-cybox, python-maec, and python-stix.

Yes, if you are using python-cybox, python-maec, or python-stix—mixbox is a required transitive dependency. No, if you are starting a new project; the dormant maintenance status and lack of updates since 2020 make it unsuitable as a foundation for new code. Install only as a dependency of active downstream packages.

Install

mixbox on PyPI

pip

pip install mixbox

uv

uv add mixbox

poetry

poetry add mixbox

Installing mixbox

Before you install

Low install friction with a pure-Python wheel distribution. Maintenance is dormant—last release was 2020-11-20 and the repository has not been updated since 2024-08-15, so expect no active bug fixes or feature development.

License in practice

Licensed under BSD (permissive), so you can use, modify, and distribute the package freely with minimal restrictions.

Quickstart

pip install mixbox

import mixbox
from mixbox import Entity

# Use mixbox utilities in downstream packages like python-cybox

Verify before relying

  • Whether mixbox remains compatible with modern Python versions beyond 3.8, given the dormant maintenance status.
  • Current stability and compatibility with recent versions of its runtime dependencies (lxml, python-dateutil, ordered-set, weakrefmethod).
  • What specific data structures and serialization logic mixbox provides to its downstream consumers.

Package facts

License not declared (permissive)
Python support not specified
Install friction low — pure-Python wheel
Runtime dependencies 4 — python-dateutil, ordered-set, lxml, weakrefmethod
Maintenance dormant — 2,093 days since the last release
Last repo commit
First released
Downloads 122,832/month — #11,929 on PyPI (30-day window, as of 2026-08-14)
Known vulnerabilities none known (OSV.dev, checked 2026-08-14)

Evidence: mixbox-1.0.5-py2.py3-none-any.whl

Development Status :: 5 - Production/StableIntended Audience :: DevelopersLicense :: OSI Approved :: BSD LicenseOperating System :: OS IndependentProgramming Language :: Python :: 2Programming Language :: Python :: 2.6Programming Language :: Python :: 2.7Programming Language :: Python :: 3Programming Language :: Python :: 3.5Programming Language :: Python :: 3.6Programming Language :: Python :: 3.7Programming Language :: Python :: 3.8

Tags

cybox maec stix shared utilitiesthreat intelligence library utilitiescybersecurity data serializationcommon code for security frameworksxml data handling for threat intel
threat-intelligencecybersecurity-frameworkdormant-maintenance

More Security packages