modelo

modelo is a Rust multi-model validation library and a Python bindings extension intended as a drop-in replacement for python-ort.

Namespaces

Each model family lives in its own namespace, so families can be added without disturbing the others. Currently there is one: ort, the OSS Review Toolkit model.

	ORT model	Shared validation engine
Rust	`modelo::models::ort::*` (`src/models/ort/`)	`modelo::models::{Model, ValidationError}`
Python	`modelo.ort`	—

Adding a family means a new src/models/<name>/ directory whose types implement models::Model, plus a modelo.<name> submodule in src/python/mod.rs. The engine and the bindings' plumbing stay as they are.

Workspace layout

This repository is a Cargo workspace with two crates, so the library stays free of CLI/TUI dependencies (clap, ratatui, crossterm):

Crate	Contents	Dependencies
`modelo`	The validation engine and models (`src/`), plus the optional Python bindings	`serde`, `serde_yaml`, `thiserror`, `purl`, `pyo3` (feature-gated)
`modelo-cli`	The `modelo` binary: CLI subcommands and the TUI	`modelo`, `clap`, `ratatui`, `crossterm`, `anyhow`

Build

cargo build --release --workspace  # library + `modelo` binary
cargo test --workspace              # unit + integration tests (203 tests)
cargo clippy --workspace --all-targets # lints
cargo doc --workspace --open        # API documentation

The Python extension module lives in its own modelo-python crate, so the modelo library and the modelo binary never link against libpython:

cargo build --release -p modelo-python

Validating files: the `modelo` CLI

The modelo binary lives in the modelo-cli crate:

cargo install modelo-cli

modelo license-classifications  tests/data/license-classifications.yml
modelo repository-configuration tests/data/repo_config/curations.yml
modelo ort-result               tests/data/evaluation-result.yml

The subcommands are still flat rather than grouped per family (modelo ort ort-result ...); that regrouping is worth doing when a second family lands, not before.

Each subcommand prints valid <kind> file. and exits 0, or reports the first parse/validation error and exits non-zero. --debug additionally pretty-prints the parsed model. This is the equivalent of python-ort's ort-validate (src/tools/ort_validate.py).

Interactive TUI

modelo tui [FILE] (or modelo with no arguments) opens a ratatui interface: pick the model kind, type a file path, see the validation result. ↑/↓ (or k/j) move and scroll, Enter confirms, b goes back from the result screen, q/Esc quits.

Using it from Python

pip install modelo

or, from a checkout:

pip install maturin
maturin develop     # into the active virtualenv
# or: pip install .                   # maturin is the build backend

The modelo.ort submodule exposes the three top-level ORT models, each parsed from YAML and navigated with plain attribute access, the way python-ort's pydantic models are:

from pprint import pprint

from modelo.ort import LicenseClassifications, OrtResult, RepositoryConfiguration

result = OrtResult.from_yaml_file("tests/data/evaluation-result.yml")
config = RepositoryConfiguration.from_yaml_str(open(".ort.yml").read())

pprint(result.analyzer)                                 # AnalyzerRun(start_time=..., ...)
result.analyzer.environment.ort_version
result.analyzer.result.projects[0].id
result.repository.vcs.url

Invalid input raises ValueError (with the failing field path, as pydantic's ValidationError does); an unreadable path raises OSError.

Every nested model is an instance of a class named after it (type(result.analyzer).__name__ == "AnalyzerRun"), all of them subclasses of modelo.ort.Object. Besides attribute access they support keys(), values(), items(), obj["field"], "field" in obj, len(obj), == and to_dict():

import json

result.to_dict()                                        # nested plain dicts and lists
json.loads(result.to_json()) == result.to_dict()        # True — one source of truth

Fields that ORT itself serializes as scalars stay scalars: Identifier is a string ("PIP::requirements.txt:1.0"), enums are their member names, and free-form maps such as labels are dicts.

Type checking

The wheel is a PEP 561 typed package: modelo/py.typed ships alongside modelo/ort.pyi, so mypy, pyright and ty resolve import modelo.ort and the model classes without falling back to Any. The compiled extension lives at modelo._modelo; modelo.ort is a thin Python re-export of it, which is what makes the module statically resolvable.

Examples

Runnable counterparts of python-ort's examples/, using only the standard library:

python examples/license_classifications.py tests/data/license-classifications.yml
python examples/repo_config.py             tests/data/repo_config/curations.yml
python examples/ort_result.py              tests/data/evaluation-result.yml --analyzer

Checking parity against python-ort

examples/parity_check.py parses every fixture in tests/data/ with both libraries and diffs the serialized result, ignoring set-backed field ordering (arbitrary in both):

pip install . python-ort
python examples/parity_check.py

All 9 fixtures agree; analyzer-result.yml is rejected by both libraries for the same unknown field. The behaviours this covers:

Int-backed enums (Severity, *Reason, …) accept the numeric value or the case-sensitive member name, and serialize as the member name — python-ort's ValidatedIntEnum.
Unknown fields are rejected wherever python-ort sets extra="forbid", and accepted where it sets extra="allow"/"ignore".
Loose scalars are coerced as python-ort's mode="before" validators do (an integer start_lines, non-string options values).

Continuous integration

.github/workflows/ci.yml runs on every push and pull request: format (rustfmt), lint (clippy, warnings denied), test (Linux/macOS/Windows), python (bindings built and smoke-tested on 3.10 and 3.13) and parity (the diff above against python-ort).

Every third-party action is pinned to a full commit SHA with the released tag in a trailing comment (uses: actions/checkout@3d3c42e... # v7.0.1), so a moving tag cannot change what runs. To bump one, resolve the new tag's SHA (gh api repos/<owner>/<repo>/commits/<tag> --jq .sha) and update both the SHA and the comment. actionlint .github/workflows/*.yml validates the files.

Deployment

Both registries publish from a v* tag (git tag -s v0.1.0 && git push origin v0.1.0) or a manual Run workflow dispatch. Bump the version in Cargo.toml and pyproject.toml first — they are separate files and must agree.

PyPI — `.github/workflows/release-pypi.yml`

Builds wheels with maturin-action for Linux (x86_64, aarch64), macOS (x86_64, aarch64) and Windows (x64), plus an sdist, then uploads everything in one publish job via pypa/gh-action-pypi-publish (maturin upload only authenticates with an API token, so it cannot do the OIDC exchange trusted publishing needs).

One-time setup: on PyPI, add a trusted publisher for the modelo project pointing at this repository and the workflow file release-pypi.yml with environment pypi; then create a GitHub environment named pypi. No API token is stored — the job authenticates with the OIDC token from id-token: write.

crates.io — `.github/workflows/release-crates.yml`

Runs the test suite and cargo package first, then cargo publish.

One-time setup: create a crates.io API token scoped to publish-update for this crate, and store it as the secret CARGO_REGISTRY_TOKEN in a GitHub environment named crates-io.

Local dry runs

cargo publish --dry-run
maturin build --release   # wheel lands in target/wheels/

License

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

python_modelo-0.7.0.tar.gz (144.3 kB view details)

Uploaded Aug 12, 2026 Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

python_modelo-0.7.0-pp311-pypy311_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (990.1 kB view details)

Uploaded Aug 12, 2026 PyPymanylinux: glibc 2.17+ x86-64

python_modelo-0.7.0-pp311-pypy311_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (981.3 kB view details)

Uploaded Aug 12, 2026 PyPymanylinux: glibc 2.17+ ARM64

python_modelo-0.7.0-cp315-cp315t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (991.8 kB view details)

Uploaded Aug 12, 2026 CPython 3.15tmanylinux: glibc 2.17+ x86-64

python_modelo-0.7.0-cp315-cp315-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (984.5 kB view details)

Uploaded Aug 12, 2026 CPython 3.15manylinux: glibc 2.17+ x86-64

python_modelo-0.7.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (991.2 kB view details)

Uploaded Aug 12, 2026 CPython 3.14tmanylinux: glibc 2.17+ x86-64

python_modelo-0.7.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (978.0 kB view details)

Uploaded Aug 12, 2026 CPython 3.14tmanylinux: glibc 2.17+ ARM64

python_modelo-0.7.0-cp314-cp314-win_amd64.whl (801.7 kB view details)

Uploaded Aug 12, 2026 CPython 3.14Windows x86-64

python_modelo-0.7.0-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (984.0 kB view details)

Uploaded Aug 12, 2026 CPython 3.14manylinux: glibc 2.17+ x86-64

python_modelo-0.7.0-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (972.8 kB view details)

Uploaded Aug 12, 2026 CPython 3.14manylinux: glibc 2.17+ ARM64

python_modelo-0.7.0-cp314-cp314-macosx_11_0_arm64.whl (882.4 kB view details)

Uploaded Aug 12, 2026 CPython 3.14macOS 11.0+ ARM64

python_modelo-0.7.0-cp313-cp313-win_amd64.whl (800.7 kB view details)

Uploaded Aug 12, 2026 CPython 3.13Windows x86-64

python_modelo-0.7.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (982.4 kB view details)

Uploaded Aug 12, 2026 CPython 3.13manylinux: glibc 2.17+ x86-64

python_modelo-0.7.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (970.0 kB view details)

Uploaded Aug 12, 2026 CPython 3.13manylinux: glibc 2.17+ ARM64

python_modelo-0.7.0-cp313-cp313-macosx_11_0_arm64.whl (881.2 kB view details)

Uploaded Aug 12, 2026 CPython 3.13macOS 11.0+ ARM64

python_modelo-0.7.0-cp312-cp312-win_amd64.whl (802.1 kB view details)

Uploaded Aug 12, 2026 CPython 3.12Windows x86-64

python_modelo-0.7.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (982.5 kB view details)

Uploaded Aug 12, 2026 CPython 3.12manylinux: glibc 2.17+ x86-64

python_modelo-0.7.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (969.2 kB view details)

Uploaded Aug 12, 2026 CPython 3.12manylinux: glibc 2.17+ ARM64

python_modelo-0.7.0-cp312-cp312-macosx_11_0_arm64.whl (881.2 kB view details)

Uploaded Aug 12, 2026 CPython 3.12macOS 11.0+ ARM64

python_modelo-0.7.0-cp311-cp311-win_amd64.whl (804.9 kB view details)

Uploaded Aug 12, 2026 CPython 3.11Windows x86-64

python_modelo-0.7.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (987.1 kB view details)

Uploaded Aug 12, 2026 CPython 3.11manylinux: glibc 2.17+ x86-64

python_modelo-0.7.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl (978.0 kB view details)

Uploaded Aug 12, 2026 CPython 3.11manylinux: glibc 2.17+ ARM64

python_modelo-0.7.0-cp311-cp311-macosx_11_0_arm64.whl (886.1 kB view details)

Uploaded Aug 12, 2026 CPython 3.11macOS 11.0+ ARM64

File details

Details for the file python_modelo-0.7.0.tar.gz.

File metadata

Download URL: python_modelo-0.7.0.tar.gz
Upload date: Aug 12, 2026
Size: 144.3 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for python_modelo-0.7.0.tar.gz
Algorithm	Hash digest
SHA256	`3efc42a40df0733a346d9aa23911c6740d89a4e3ae2a86cc5a384f18a932b586`
MD5	`ec6fef1e445e85458fb4d439fe42bc12`
BLAKE2b-256	`31857f91592fca5d898a47c449a5e1432110c608f223bc14bfa875671137cb76`

Algorithm	Hash digest
SHA256	`c201d7a4fa479a37dd4acca66cfafe7fcaeca64972018d3a4065ca8c8bf3ee47`
MD5	`68b0366ffa375747eee57b3db3c12538`
BLAKE2b-256	`82c31ca153823f9b2571594bc94f85541e3329b60e3dc603cc29f59858cdd4d1`

Algorithm	Hash digest
SHA256	`b3d19f1e172c795360ee4a1a08daa9fabf185bd25e50960dcfe4c415b2bc9d75`
MD5	`5670daf61b0d59d2122088abc2cd6c58`
BLAKE2b-256	`39607bc123cfef511ce8cd58a3f27b454e92fc4df922ed2fc3276ca42f696d97`

Algorithm	Hash digest
SHA256	`1983339af9d3077402647f60938b5aa753febc72d451075ae03b9eed3114e355`
MD5	`ab145d047b3996a9fdd6b3d513567a4e`
BLAKE2b-256	`18676ea395727430eef40eeb0ac902a6e33ad9e3abb60fdf440916f9b59f7baf`

Algorithm	Hash digest
SHA256	`bbb0db1b20c8ea5e8b784cfac2957fd78b7109927035be09cc936699cd50bc0a`
MD5	`998af2f0792fbc27dfdfb9d3c0cc504e`
BLAKE2b-256	`8728e4f2dd4f84105fde77e47c219a1706991b06d95e6dfc3a233ebc351618e8`

Algorithm	Hash digest
SHA256	`7f809c18edd8d394b0811252d0199ea41e10bfc20157f8983d418aa8499aa919`
MD5	`ec53fd977194d99a387791494a808dec`
BLAKE2b-256	`05f6acbb21998654308a71043154f1e8da8d949625b943c56a6f031920926250`

Algorithm	Hash digest
SHA256	`6706a3d3ce822cd398f2b1423684c2188c625d1a2ed7c1211c60837edcd4ca2a`
MD5	`48c7a5cbcc49e42bd11cc9b497d5b7d7`
BLAKE2b-256	`37fa040c328dbdab89ce507cd4cfaa4ad6e46d92a137afa9fcf1cecfb077681d`

Algorithm	Hash digest
SHA256	`08927954636d429d971cd81d6e86582c3d9d59ee58965ee381870204058d2255`
MD5	`d8734df20de5990c0cb71d9fe0d2ba1d`
BLAKE2b-256	`b439a20d77803efc6c3b9f301793ad0be1177e2dddbc9c8ef6451816cd0f0a55`

Algorithm	Hash digest
SHA256	`a8df9898528a080728f9e0e74e7d014f28dc1b06193bd9f9caf7787496a117b4`
MD5	`e0f9109511a09e4c00f525d9cc1e3114`
BLAKE2b-256	`5ed48d26436cfec2a0f43e4f51815d715b36f9398b9198b035a2dc0fd7b8929a`

Algorithm	Hash digest
SHA256	`441b045e097ae3bdbccd7d8e39f51ab4bdb28859157389e61f51d9f544246995`
MD5	`7ad83f6dd3e55cd5714a4fd0acb861d7`
BLAKE2b-256	`c253e8ecb403e6fe92cfb1158983b8c61891f93c6a2133666461aa2df09758af`

Algorithm	Hash digest
SHA256	`423d219ad30ff6edc66c0c295821d7477f43dadf479d2eccb221742d49af0687`
MD5	`0bc9fd0a7a1cc7f0cdd29cdc0def959b`
BLAKE2b-256	`eda9144b74f665a3ffb740ce0d01b6183d2e96e750f41d33f18c6635afa403ba`

Algorithm	Hash digest
SHA256	`98fddb879ed294093fc8736e8dbd08eab32323b14f947050a1552a5f8b93fc35`
MD5	`2fea1aa40f5a72845fc8ad226fdd57b7`
BLAKE2b-256	`21b40d550f99968d5833a15799d1f413a0d6ba4e379ed3baabcd19bd48df33cb`

Algorithm	Hash digest
SHA256	`6387a4b0ba80020e0802bcc2c341c9d60da5fb447ac193af878d26f72d811288`
MD5	`ecdcb13d511b8f444cc28045bb3fdb7d`
BLAKE2b-256	`22269ec1a68c69e6cc1c3be12f46191fbcf0b1a2090a5b842e735f4fd70e20fc`

Algorithm	Hash digest
SHA256	`e5d38b4e7089b459de54b1c52fedb262d4434d736ed2803ff1645ddfab3c5f19`
MD5	`c4857893512bd8ce697e8b74c034fb68`
BLAKE2b-256	`4a65e6888fd058f5ed05064cc30c658e25b7e7b6483b01305411970a3e5d906b`

Algorithm	Hash digest
SHA256	`7a314dfac37cb529de3e4ea4f833d7c5d15592279af543af4a8eeecf06c313eb`
MD5	`2195e96b78ca0a730fc6a9fd4697ccb5`
BLAKE2b-256	`c3f07ac4ff1dfac0d0ec771f1ccd117acb8881ce4ad774c019024390f415b2de`

Algorithm	Hash digest
SHA256	`6b976d9d81737352469dc8eb23123c4307a43235735dd9d45480fd82181247f5`
MD5	`f76ed6de484eef01283837072c5889cf`
BLAKE2b-256	`5fe2a77525c30daaee2659c39156d7b9b8899ec78ae4a8f9c877ef0e7e9e298e`

Algorithm	Hash digest
SHA256	`6aea9d6bb6843b312d195dc2683c0fdc7a375311b0a6a0f8e61be109d5b69731`
MD5	`614fe41ef03fe6aad268ed70e15bf5b8`
BLAKE2b-256	`1fecbd4083eca932fba2c534859c940ad194772cc4a766865e46ad8f6341c47d`

Algorithm	Hash digest
SHA256	`4026d8b0b0c5b7be752a1957aee963a3665a744c50804389988456a4578c9050`
MD5	`dde13baed133e166bbbc5faa559bf7fc`
BLAKE2b-256	`06c97d7ebd3ea36ebf7c294102d9b0d6c807b7399c92be5455cee1078dc837d5`

Algorithm	Hash digest
SHA256	`21b1dee0639b61e2ffc46efec2040ba34c6df55fc14cd5bbbf169f6fdec4ec27`
MD5	`9995d06180384ff357ccfcea6e5b466e`
BLAKE2b-256	`e452a1c25250fd15c0860db1523590aa29b083cf04cc8b80e1ec495d9b590682`

Algorithm	Hash digest
SHA256	`7a9eebbb3111642365d9eed32e216896b410529d1378a63b715a8b723fc00bc5`
MD5	`29e0f901524625cc99c39f7497b28b7c`
BLAKE2b-256	`309bafb2ce413042f8c6aefdcb165736fd2d96128e4a6e1b5f9c82ca65938a13`

Algorithm	Hash digest
SHA256	`516e70edefbda7e120f36953a3b402f592168e67b1e1571606a187608efcb155`
MD5	`528edcf17d46c7154e5fe61f164f5cf0`
BLAKE2b-256	`13bc4114abd91dc18c4f6b7b75713f4467ed478c5a57f0dc6fb54027b988c987`

python-modelo 0.7.0

modelo

Namespaces

Workspace layout

Build

Validating files: the modelo CLI

Interactive TUI

Using it from Python

Type checking

Examples

Checking parity against python-ort

Continuous integration

Deployment

PyPI — .github/workflows/release-pypi.yml

crates.io — .github/workflows/release-crates.yml

Local dry runs

License

Project links

Key dates

1 maintainer

Credits

GitHub Statistics

License expression

Requires

Classifiers

Download files

Source Distribution

Built Distributions

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

Validating files: the `modelo` CLI

PyPI — `.github/workflows/release-pypi.yml`

crates.io — `.github/workflows/release-crates.yml`

Algorithm	Hash digest
SHA256	`3e4e282446b6062b6a39f4b976bf90e7ebce3375299ead72ca10abe9aa5591fb`
MD5	`a45bccf9ba55f8e93fa2b83fecb08cab`
BLAKE2b-256	`1ecb95aba05f20d35b6e54519e2ef64d3ef87def94754f19e57777395987d4c4`

Algorithm	Hash digest
SHA256	`83db761fb59cad4444643375873dee35dafa004f55457fa657066947f28bd4ec`
MD5	`1f77690b016b00f2eb0802fd7060f702`
BLAKE2b-256	`0abf6109b4beba8d0a6642979f2164793d681da4ffbeece3804fc446d5ede0d7`