From f8e594a9b4b14d640ce10ee4de7acf88541136a1 Mon Sep 17 00:00:00 2001 From: Vinta Chen Date: Sun, 16 Aug 2026 14:27:02 +0800 Subject: [PATCH] audit: sweep Miscellaneous, drop tryton, re-home itsdangerous to Cryptography MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Restructure: itsdangerous moves to Security > Cryptography as a challenger — HMAC-based data signing fits "cryptographic primitives and secure protocols" better than the grab-bag. Kept past the 12-month activity line (repo quiet since 2025-06, last release 2024-04) as mature-stable on the sortedcontainers precedent: 222.8M downloads/month, the signing answer, no successor. Miscellaneous keeps blinker (192.2M/mo) and boltons (26.5M/mo) as obvious choices. Removed: - tryton — 10.9K downloads/month, and that PyPI package is the desktop client (the framework server is trytond); the linked GitHub repo is a self-described 216-star mirror; and the ERP obvious choice by adoption is Odoo (~7M users vs hundreds-to-thousands of Tryton deployments, web-verified), which enters in the next commit. Co-Authored-By: Claude --- README.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/README.md b/README.md index 375f11e1..b7ce34d2 100644 --- a/README.md +++ b/README.md @@ -1090,6 +1090,7 @@ _Libraries for cryptographic primitives and secure protocols._ - [cryptography](https://github.com/pyca/cryptography) - A package designed to expose cryptographic primitives and recipes to Python developers. - [pynacl](https://github.com/pyca/pynacl) - Python binding to the Networking and Cryptography (NaCl) library. - [paramiko](https://github.com/paramiko/paramiko) - The leading native Python SSHv2 protocol library. +- [itsdangerous](https://github.com/pallets/itsdangerous) - Various helpers to pass trusted data to untrusted environments. ### Penetration Testing @@ -1137,8 +1138,6 @@ _Useful libraries or tools that don't fit in the categories above._ - [blinker](https://github.com/pallets-eco/blinker) - A fast Python in-process signal/event dispatching system. - [boltons](https://github.com/mahmoud/boltons) - A set of pure-Python utilities. -- [itsdangerous](https://github.com/pallets/itsdangerous) - Various helpers to pass trusted data to untrusted environments. -- [tryton](https://github.com/tryton/tryton) - A general-purpose business framework. ## Resources