pure-sasl
Pure Python client SASL implementation
Decision gist · record as of 2026-08-14
No. The package is abandoned (last release 2019-10-14, last commit 2023-06-25) with no active maintenance. While it has no known vulnerabilities and low install friction, the lack of updates means it will not receive security patches or compatibility fixes for modern Python versions. Use only if you are maintaining legacy code that already depends on it; for new projects, choose an actively maintained alternative.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- The package declares support for Python 2.6–3.6 in its classifiers; compatibility with modern Python versions is unverified.
- Installation is low-friction with no runtime dependencies.
- However, the package is abandoned as of 2019-10-14 with no commits since 2023-06-25, meaning security updates and compatibility fixes are unlikely.
License · maintenance · safety
MIT (permissive) — MIT license is permissive and imposes minimal restrictions; you can use, modify, and distribute the package freely provided you retain the license notice.
last release 2019-10-14 (2496 days) · last repo commit 2023-06-25 · 39 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 7,797,919 downloads/mo, #1,694 on PyPI
Alternatives
Verify before relying
from pure-sasl import SASLClient
sasl = SASLClient('somehost', 'protocol')
available_mechs = ['PLAIN', 'ANONYMOUS']
sasl.choose_mechanism(available_mechs)
response = sasl.process(challenge_bytes)- Whether the package works reliably with Python versions after 3.6.
- Current security posture of the SASL mechanisms implemented, particularly DIGEST-MD5 and CRAM-MD5.
- Whether GSSAPI support requires additional system libraries or configuration.
What it is and what it does
pure-sasl is a pure Python implementation of the SASL (Simple Authentication and Security Layer) protocol for client-side authentication. It handles the negotiation and challenge-response exchange required to authenticate a client to a server using one of several supported mechanisms. The library manages the state machine of SASL authentication, allowing you to feed server challenges into the client and receive responses to send back, and provides optional message wrapping and unwrapping for integrity and confidentiality after authentication succeeds.
The package has no external runtime dependencies and installs as a wheel, making it straightforward to add to any Python project. However, it has been abandoned since 2019-10-14 with no active maintenance, so it is best suited for legacy systems or environments where you control the authentication mechanisms and can accept the risk of unpatched issues.
Use it for
- Authenticate to SASL-enabled servers (e.g., XMPP, SMTP, LDAP) from a Python client application.
- Implement custom authentication flows in messaging or protocol libraries that require SASL support.
- Build a pure-Python alternative to system SASL libraries for environments where external dependencies are constrained.
- Wrap or unwrap messages for integrity protection after SASL authentication completes.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
No.
The package is abandoned (last release 2019-10-14, last commit 2023-06-25) with no active maintenance. While it has no known vulnerabilities and low install friction, the lack of updates means it will not receive security patches or compatibility fixes for modern Python versions. Use only if you are maintaining legacy code that already depends on it; for new projects, choose an actively maintained alternative.
Install
pure-sasl on PyPI
Before you install
Installation is low-friction with no runtime dependencies. However, the package is abandoned as of 2019-10-14 with no commits since 2023-06-25, meaning security updates and compatibility fixes are unlikely.
The package declares support for Python 2.6–3.6 in its classifiers; compatibility with modern Python versions is unverified.
License in practice
MIT license is permissive and imposes minimal restrictions; you can use, modify, and distribute the package freely provided you retain the license notice.
Quickstart
from pure-sasl import SASLClient
sasl = SASLClient('somehost', 'protocol')
available_mechs = ['PLAIN', 'ANONYMOUS']
sasl.choose_mechanism(available_mechs)
response = sasl.process(challenge_bytes)Verify before relying
- Whether the package works reliably with Python versions after 3.6.
- Current security posture of the SASL mechanisms implemented, particularly DIGEST-MD5 and CRAM-MD5.
- Whether GSSAPI support requires additional system libraries or configuration.
Package facts
| License | MIT permissive |
| Python support | Not specified |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | None |
| Maintenance | Abandoned 2,496 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 7,797,919 / month, #1,694 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 4 - BetaIntended Audience :: DevelopersLicense :: OSI Approved :: MIT LicenseNatural Language :: EnglishOperating System :: OS IndependentProgramming Language :: Python :: 2.6Programming Language :: Python :: 2.7Programming Language :: Python :: 3.3Programming Language :: Python :: 3.4Programming Language :: Python :: 3.5Programming Language :: Python :: 3.6Topic :: Software Development :: Libraries :: Python Modules |
Evidence: pure_sasl-0.6.2-py2-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “sasl authentication client”
- pure-saslpure-sasl is a pure Python client-side SASL implementation supporting…
- thrift-saslImplements SASL authentication transports for Thrift RPC clients,…
- scrampScramp implements the SCRAM authentication protocol in Python,…
Give your agent the search over MCP, or paste the wish link into any chat.
More Python Modules packages
Converts domain names between Unicode and ASCII-compatible encoding (Punycode) according to IDNA 2008 and Unicode Technical Standard 46, with security validation and broader script coverage than the standard library.
Install it if you work with internationalized domain names, need to validate domains, or use HTTP clients that depend on it transitively.
Setuptools is a Python build backend and package management tool that handles building, distributing, and installing Python packages, including support for C/C++ extension modules.
PyYAML parses and emits YAML 1.1 data format, enabling serialization and deserialization of configuration files and Python objects to and from human-readable YAML text.
Pydantic validates Python data structures against type hints, coercing and checking input at runtime to ensure it matches a declared schema.
Provides reusable metadata objects for use with PEP-593 `typing.Annotated` to express common constraints like bounds, collection sizes, and predicates on types.
Install it if you use or build libraries that need to express type constraints in a standardized, inspectable way—or if you want to annotate your own types with…
Provides runtime tools to inspect and introspect Python type annotations, enabling programmatic examination of type hints at execution time.
See also pure-transport · scramp · tlslite-ng · thrift-sasl · gssapi · python-binary-memcached · winkerberos · requests-gssapi · pyspnego · pykerberos