This release is a pre-release and may not be stable for production use.
Safer pickles.
It’s no secret Python’s pickle module is unsafe. It’s also enormously popular. Most applications should really just use something else (like JSON). Some really are best served by pickles, such as most uses of scientific Python.
This library can’t fix the fundamental issues with pickle, but it can make unpickling objects as safe as it ever is going to be. If you can, you should use something else. If you can’t, you should use this.
How does it work?
This library gives you tools to specify a set of constraints around how a pickle should behave and some general sniff checks for pickles. It then lets you apply those checks to do entirely static analysis on a pickle on the one hand, as well as apply some of the constraints to a real unpickler object so they’re also checked when you’re actually unpickling.
WARNING: This project can’t save you if the model pickles you give it do something dangerous. For example, if you’re saving a machine learning model that includes a numpy ndarray, and it turns out ndarray actually has a code execution vulnerability in it on deserialization, this package will not help you catch that.
Misc
“Pikara” is the Maori word for pickle.
Laurens Van Houtven (lvh) <lvh@latacora.com>
1 maintainer
Metadata
1 maintainer
Release files for pikara 18.0.0.dev0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| pikara-18.0.0.dev0.tar.gz | 12.0 kB | Details |
Release files / pikara-18.0.0.dev0.tar.gz
| Download URL | pikara-18.0.0.dev0.tar.gz |
|---|---|
| Size | 12.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
fc39cc04cc5150e7e52630aa6dd33b2de6a641063406c720c570aca86b7523ca
|
|
BLAKE2b-256 checksum How to use checksums |
1324a2399aab3e95b1cc7eb7046ffbc0d46e98cc37d75107627245f76b429942
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
