warrant
Python class to integrate Boto3's Cognito client so it is easy to login users. With SRP support.
Decision gist · record as of 2026-08-14
No. While the package has no known vulnerabilities and installs without friction, it is abandoned and targets obsolete Python versions (2.7, 3.6). Modern AWS Cognito development should use boto3 directly or a maintained wrapper. Only consider it if you are maintaining legacy code already locked to Python 2.7 or 3.6 and cannot migrate.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires AWS Cognito user pool and client credentials; package targets Python 2.7 and 3.6, which are no longer supported.
- Installation is frictionless with no runtime dependencies.
- However, the package is abandoned—last commit was 2022-11-07 and latest release 2017-12-11.
License · maintenance · safety
Apache License 2.0 (permissive) — Licensed under Apache License 2.0 (permissive), which allows commercial and private use with minimal restrictions, though you must include a copy of the license and state significant changes.
last release 2017-12-11 (3168 days) · last repo commit 2022-11-07 · 473 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 96,697 downloads/mo, #13,200 on PyPI
Alternatives
Verify before relying
pip install warrant
from warrant import Cognito
u = Cognito('your-user-pool-id', 'your-client-id', username='bob')
u.authenticate(password='bobs-password')- Whether the package works reliably with Python versions newer than 3.6
- Current compatibility with modern versions of boto3 or AWS SDK dependencies
- Whether SRP authentication still functions with current AWS Cognito API
What it is and what it does
Warrant is a Python wrapper around AWS Cognito user management, designed to simplify common authentication and user administration tasks. It provides a Cognito class that encapsulates operations like user registration, login (with SRP support), password reset, profile updates, and token handling, alongside an AWSSRP utility for Secure Remote Password authentication.
The package has no runtime dependencies and installs cleanly, but it is no longer maintained. Its last release was in December 2017 and the repository shows no commits since November 2022. It explicitly targets Python 2.7 and 3.6, both of which reached end-of-life years ago. While the code may still run on newer Python versions, there is no active support or testing to confirm compatibility, and any breaking changes in boto3 or AWS Cognito's API would not be addressed.
Use it for
- Build a Python web application that needs to authenticate users against an AWS Cognito user pool without writing raw boto3 calls.
- Implement user self-service operations like password reset, profile updates, and email verification in a legacy Python 2.7 or 3.6 codebase.
- Perform admin operations on Cognito user pools, such as listing users or groups, from a Python backend.
- Integrate Cognito SRP authentication into a client application to avoid sending passwords in plain text.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
No.
While the package has no known vulnerabilities and installs without friction, it is abandoned and targets obsolete Python versions (2.7, 3.6). Modern AWS Cognito development should use boto3 directly or a maintained wrapper. Only consider it if you are maintaining legacy code already locked to Python 2.7 or 3.6 and cannot migrate.
Install
warrant on PyPI
Before you install
Installation is frictionless with no runtime dependencies. However, the package is abandoned—last commit was 2022-11-07 and latest release 2017-12-11. It targets Python 2.7 and 3.6, both long out of support, so compatibility with modern Python versions is uncertain.
Requires AWS Cognito user pool and client credentials; package targets Python 2.7 and 3.6, which are no longer supported.
License in practice
Licensed under Apache License 2.0 (permissive), which allows commercial and private use with minimal restrictions, though you must include a copy of the license and state significant changes.
Quickstart
pip install warrant
from warrant import Cognito
u = Cognito('your-user-pool-id', 'your-client-id', username='bob')
u.authenticate(password='bobs-password')Verify before relying
- Whether the package works reliably with Python versions newer than 3.6
- Current compatibility with modern versions of boto3 or AWS SDK dependencies
- Whether SRP authentication still functions with current AWS Cognito API
Package facts
| License | Apache License 2.0 permissive |
| Python support | Not specified |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | None |
| Maintenance | Abandoned 3,168 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 96,697 / month, #13,200 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Environment :: Web EnvironmentProgramming Language :: Python :: 2.7Programming Language :: Python :: 3.6Topic :: Software Development :: Libraries :: Python Modules |
Evidence: warrant-0.6.1-py2.py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “aws cognito python wrapper”
- warrantWarrant wraps AWS Cognito user management operations into a Python…
- pycognitoSimplifies AWS Cognito user authentication and management for Python…
- cognitojwtDecodes and verifies Amazon Cognito JWT tokens in both synchronous…
Give your agent the search over MCP, or paste the wish link into any chat.
More Python Modules packages
Converts domain names between Unicode and ASCII-compatible encoding (Punycode) according to IDNA 2008 and Unicode Technical Standard 46, with security validation and broader script coverage than the standard library.
Install it if you work with internationalized domain names, need to validate domains, or use HTTP clients that depend on it transitively.
Setuptools is a Python build backend and package management tool that handles building, distributing, and installing Python packages, including support for C/C++ extension modules.
PyYAML parses and emits YAML 1.1 data format, enabling serialization and deserialization of configuration files and Python objects to and from human-readable YAML text.
Pydantic validates Python data structures against type hints, coercing and checking input at runtime to ensure it matches a declared schema.
Provides reusable metadata objects for use with PEP-593 `typing.Annotated` to express common constraints like bounds, collection sizes, and predicates on types.
Install it if you use or build libraries that need to express type constraints in a standardized, inspectable way—or if you want to annotate your own types with…
Provides runtime tools to inspect and introspect Python type annotations, enabling programmatic examination of type hints at execution time.
See also pycognito · aws-cdk.aws-cognito · Flask-AWSCognito · Flask-Cognito · cognitojwt · fastapi-cognito · fastapi-cloudauth · Flask-Login · django-allauth · aws-assume-role-lib