oss2

What it is and what it does

oss2 is the Python SDK for Alibaba Cloud's Object Storage Service, a cloud storage platform operated by Alibaba. It wraps HTTP operations to let you authenticate with OSS, create and manage buckets, and perform standard object operations—upload, download, delete, and list. The SDK depends on requests for HTTP transport, crcmod for checksums, pycryptodome for cryptographic operations, and Alibaba's own SDK packages for KMS integration and core API calls.

The package is mature (Production/Stable classifier, first released in 2015) and widely downloaded (14 million monthly downloads, top 5000 PyPI packages). However, it has been dormant for 658 days with no recent maintenance activity, so it is best suited for stable, production workloads that do not require active support or updates. If you are already committed to Alibaba Cloud OSS and need a straightforward Python client, this is the official choice; if you are evaluating cloud storage options, the lack of recent maintenance may be a concern.

Use it for:

• Upload and download files to Alibaba Cloud OSS buckets from Python applications without writing raw HTTP code.
• Batch process objects stored in OSS—iterate over bucket contents, delete objects, or manage metadata.
• Integrate OSS storage into data pipelines or web applications that run on Alibaba Cloud infrastructure.
• Implement server-side encryption and KMS key management for sensitive data stored in OSS.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Python SDK for uploading, downloading, and managing objects in Alibaba Cloud Object Storage Service (OSS) buckets via HTTP.

Yes, if you are already using Alibaba Cloud OSS and need a Python client. The package is stable, widely used, and carries no known vulnerabilities. However, the 658-day maintenance gap means no active bug fixes or feature development—install only if you accept that constraint and your use case is stable. Not recommended if you are evaluating cloud storage options or need an actively maintained SDK.

Install

oss2 on PyPI

pip install oss2

uv add oss2

poetry add oss2

Installing oss2

Before you install

High install friction due to six runtime dependencies including cryptographic libraries (pycryptodome) and Alibaba-specific SDK packages (aliyun-python-sdk-kms, aliyun-python-sdk-core). Maintenance is dormant—last release was 658 days ago, so expect no active bug fixes or feature updates.

License in practice

MIT license (permissive) means you can use, modify, and distribute this package freely in commercial and private projects with minimal restrictions.

Quickstart

pip install oss2

import oss2

auth = oss2.Auth('access_key_id', 'access_key_secret')
bucket = oss2.Bucket(auth, 'http://oss-cn-hangzhou.aliyuncs.com', 'bucket_name')
bucket.put_object('key', 'content')
result = bucket.get_object('key')
print(result.read())

Requires valid Alibaba Cloud OSS credentials (AccessKeyId and AccessKeySecret) and an active OSS bucket endpoint; Python 2.6, 2.7, 3.3–3.8 are the documented supported versions.

Verify before relying

• Whether the package works reliably with Python versions beyond 3.8 (classifiers list 3.8 as the highest, but latest_release is recent).
• Current status of the aliyun-python-sdk-kms and aliyun-python-sdk-core dependencies and their own maintenance.
• Whether dormant status reflects intentional stability or abandonment.

Package facts

Evidence: oss2-2.19.1.tar.gz

Tags

More Internet packages