roastedDuck
An analytical SQL engine, ported to Rust.
roastedDuck is an independently maintained, MIT-licensed Rust implementation
targeting DuckDB 1.5.6 compatibility. It provides the familiar duckdb Python
API backed by the Rust engine. This is a public preview with explicit
compatibility boundaries.
Documentation · Source · Issues · Benchmark evidence
Install
Use a fresh virtual environment:
python3 -m venv .venv
. .venv/bin/activate
python -m pip install roastedduck
The distribution is roastedduck, while the compatibility import is
duckdb. The official duckdb distribution owns the same import namespace;
install the two engines in separate environments. Keep optional packages such
as NumPy, pandas, and PyArrow in the environment where you use them.
Run a query
import duckdb
with duckdb.connect() as connection:
result = connection.execute(
"SELECT category, sum(amount) AS total "
"FROM (VALUES ('books', 20), ('coffee', 8), ('books', 15)) "
"AS sales(category, amount) GROUP BY category ORDER BY total DESC"
).fetchall()
assert result == [("books", 35), ("coffee", 8)]
Pass a database filename to duckdb.connect("example.duckdb") for persistence.
Use parameterized SQL for application values:
with duckdb.connect("example.duckdb") as connection:
connection.execute("CREATE TABLE IF NOT EXISTS readings(value INTEGER)")
connection.execute("INSERT INTO readings VALUES (?)", [42])
print(connection.execute("SELECT sum(value) FROM readings").fetchall())
Versions and platforms
The compatibility target is DuckDB 1.5.6. The distribution version
1.5.6.post2 identifies a roastedDuck packaging/security revision of that
target. duckdb.__version__ and duckdb.__duckdb_version__ retain the compatibility
version; importlib.metadata.version("roastedduck") identifies the installed
distribution, and duckdb.version() reports both.
Wheels target normal CPython 3.10–3.14, on macOS arm64, Linux arm64, and Linux x86_64. Linux wheels use the manylinux 2.28 baseline. Windows, Intel Macs, PyPy, free-threaded Python, and newer Python versions are outside this preview's qualified scope.
Compatibility and safety
The recorded engine qualification includes differential SQL/client tests and bidirectional persistence/WAL checks against the pinned reference. Known failures, skips, shell differences, and performance outliers remain explicit in the compatibility guide. Use a copy of existing data when evaluating a different engine. SQL can access files and configured network resources; it is not an isolation boundary for untrusted code.
The security revisions update PyO3 to 0.30.1, rsa to 0.10.0, and
ctutils to 0.4.8, and has its own artifact and test provenance.
The post2 revision uses roastedDuck names throughout the Rust workspace and
ships freshly qualified images. DuckDB-compatible Python imports and native APIs
remain stable.
Historical native benchmarks describe their recorded binaries
and workloads; they are not a guarantee for every Python query or later build.
License and credits
MIT licensed, with retained upstream and third-party notices. The work builds on DuckDB's algorithms, interfaces, tests, and community engineering. Native cryptography dependencies may contain non-Rust code.
DuckDB is a trademark of the DuckDB Foundation. roastedDuck is not affiliated with or endorsed by the Foundation.
1 maintainer
Metadata
1 maintainer
Release files for roastedduck 1.5.6.post2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| roastedduck-1.5.6.post2.tar.gz | 8.1 MB | With provenance | Details for roastedduck-1.5.6.post2.tar.gz |
Built distributions (wheels)
Total release size: 784.5 MB
Release files / roastedduck-1.5.6.post2.tar.gz
| Download URL | roastedduck-1.5.6.post2.tar.gz |
|---|---|
| Size | 8.1 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c62ef242649733f801a62295ea7632cdc33d810985506bafdbd0d46d5b010ffe
|
|
BLAKE2b-256 checksum How to use checksums |
899953e1d9a8943ebc4eadcd45012c43711a2e9bb094f57a19e16d6c896dae39
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp314-cp314-manylinux_2_28_x86_64.whl
| Download URL | roastedduck-1.5.6.post2-cp314-cp314-manylinux_2_28_x86_64.whl |
|---|---|
| Size | 67.9 MB |
| Tags | CPython 3.14 Linux glibc 2.28+ x86-64 |
|
SHA-256 checksum How to use checksums |
0abf3f7f7ab21426b2595c8440087180e2a43ae67d5fba5933ea67280b88fe02
|
|
BLAKE2b-256 checksum How to use checksums |
c4e13cc433d8cfd43551f6010be4ae1d61294bd3a2376486ed407779b0964e48
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp314-cp314-manylinux_2_28_aarch64.whl
| Download URL | roastedduck-1.5.6.post2-cp314-cp314-manylinux_2_28_aarch64.whl |
|---|---|
| Size | 64.4 MB |
| Tags | CPython 3.14 Linux glibc 2.28+ ARM64 |
|
SHA-256 checksum How to use checksums |
8a6d1c0f465ca09fe42e60a8bccfe72abd0127c86e6c9c284a507e93236747da
|
|
BLAKE2b-256 checksum How to use checksums |
5114d06802477a41d10b1f740088f4df75061973aa2965c917625c63e07f577d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp314-cp314-macosx_11_0_arm64.whl
| Download URL | roastedduck-1.5.6.post2-cp314-cp314-macosx_11_0_arm64.whl |
|---|---|
| Size | 22.9 MB |
| Tags | CPython 3.14 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
0cd4266516396f8d06385da778fc907ab60722749ba3e37ddca26ecbe5f49a5a
|
|
BLAKE2b-256 checksum How to use checksums |
80354ef881ff6f27975c5a7296c97ffee4e191bba817ef60cd5d6ebbf98034bf
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp313-cp313-manylinux_2_28_x86_64.whl
| Download URL | roastedduck-1.5.6.post2-cp313-cp313-manylinux_2_28_x86_64.whl |
|---|---|
| Size | 67.9 MB |
| Tags | CPython 3.13 Linux glibc 2.28+ x86-64 |
|
SHA-256 checksum How to use checksums |
a3e65b8413f3807a8206cef3eadce899e33f3bdabaa2e125688e9bea4a4a3ec9
|
|
BLAKE2b-256 checksum How to use checksums |
83603f92e322e7ccfabc301303ae4dcddc1362ae1e670a2b18df7fcacf17f51f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp313-cp313-manylinux_2_28_aarch64.whl
| Download URL | roastedduck-1.5.6.post2-cp313-cp313-manylinux_2_28_aarch64.whl |
|---|---|
| Size | 64.4 MB |
| Tags | CPython 3.13 Linux glibc 2.28+ ARM64 |
|
SHA-256 checksum How to use checksums |
90bffd2e0da528c3acc76036efc59410729c52faebf8264864478139c87ae7e2
|
|
BLAKE2b-256 checksum How to use checksums |
7e8e1309ebccc63002aee4325dd5479c4c987ad676a4fa03f607d5160433ac7c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp313-cp313-macosx_11_0_arm64.whl
| Download URL | roastedduck-1.5.6.post2-cp313-cp313-macosx_11_0_arm64.whl |
|---|---|
| Size | 22.9 MB |
| Tags | CPython 3.13 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
bf1b65e1757a3cfe16513e434656445d61cdff076d339654193df5a87e8ee934
|
|
BLAKE2b-256 checksum How to use checksums |
07004d8f6d4cf75f9f93f88409d89b1155f9fc11a7674be6c977d892a0c80b56
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp312-cp312-manylinux_2_28_x86_64.whl
| Download URL | roastedduck-1.5.6.post2-cp312-cp312-manylinux_2_28_x86_64.whl |
|---|---|
| Size | 67.9 MB |
| Tags | CPython 3.12 Linux glibc 2.28+ x86-64 |
|
SHA-256 checksum How to use checksums |
b62a75e0629df4ff2d1087229b560e24696ca09b1e318c8f0c7cc8ed23f8b83e
|
|
BLAKE2b-256 checksum How to use checksums |
e5b01af59e3f311c594cee70dc15e06aac19eeab99fafcd0c62ba323656dec8d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp312-cp312-manylinux_2_28_aarch64.whl
| Download URL | roastedduck-1.5.6.post2-cp312-cp312-manylinux_2_28_aarch64.whl |
|---|---|
| Size | 64.4 MB |
| Tags | CPython 3.12 Linux glibc 2.28+ ARM64 |
|
SHA-256 checksum How to use checksums |
bf23a1cb94e98a805de0ebfaafbefdb058989f4e178687edd8b7ae0664258d86
|
|
BLAKE2b-256 checksum How to use checksums |
10a828dc30ee7029abb97d4b0df8714b2206ffaa0c5ed69918a7e02fece713d4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp312-cp312-macosx_11_0_arm64.whl
| Download URL | roastedduck-1.5.6.post2-cp312-cp312-macosx_11_0_arm64.whl |
|---|---|
| Size | 22.9 MB |
| Tags | CPython 3.12 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
2976533e53c5785220266f7b5fd412f5a499cf188ad92002364867db6c3d2f48
|
|
BLAKE2b-256 checksum How to use checksums |
303b368624f20760bbf88f9ba589f2ec35c369e38046c4effd3d6983a84fa800
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp311-cp311-manylinux_2_28_x86_64.whl
| Download URL | roastedduck-1.5.6.post2-cp311-cp311-manylinux_2_28_x86_64.whl |
|---|---|
| Size | 67.9 MB |
| Tags | CPython 3.11 Linux glibc 2.28+ x86-64 |
|
SHA-256 checksum How to use checksums |
ec4d4e7fb3481a403423606ac45b105a64f65fd673cb6dad2aaeb954d80a80d3
|
|
BLAKE2b-256 checksum How to use checksums |
ddc84135701fdc58e4cc262a419e7e148051f19086016fa761cd0f07b92a8fda
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp311-cp311-manylinux_2_28_aarch64.whl
| Download URL | roastedduck-1.5.6.post2-cp311-cp311-manylinux_2_28_aarch64.whl |
|---|---|
| Size | 64.4 MB |
| Tags | CPython 3.11 Linux glibc 2.28+ ARM64 |
|
SHA-256 checksum How to use checksums |
22a4a64116fcd6ec872b9e69a9838077ae0fc369ed4a3461dab3ff1fe719a125
|
|
BLAKE2b-256 checksum How to use checksums |
45260b20f36e297c2a652bbbcac6e91b4fb40de308f790750309e935eb163b0b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp311-cp311-macosx_11_0_arm64.whl
| Download URL | roastedduck-1.5.6.post2-cp311-cp311-macosx_11_0_arm64.whl |
|---|---|
| Size | 23.0 MB |
| Tags | CPython 3.11 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
87d681f9c0430c7be6a81fdd8b09f9e436c1ee3d2eabc0f3b726bc248dfc6dca
|
|
BLAKE2b-256 checksum How to use checksums |
4b1d97ca09c53a2e7d01458f6f61e8dbfb9387cb5e6f86c999b55a3d035022fe
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp310-cp310-manylinux_2_28_x86_64.whl
| Download URL | roastedduck-1.5.6.post2-cp310-cp310-manylinux_2_28_x86_64.whl |
|---|---|
| Size | 67.9 MB |
| Tags | CPython 3.10 Linux glibc 2.28+ x86-64 |
|
SHA-256 checksum How to use checksums |
9156ca03bda9156caddcd851e7b54b24e86a86ed10232aa7acf088792af14fdf
|
|
BLAKE2b-256 checksum How to use checksums |
138819b35ceb43cb85665da747773efa7f3b8949ab930d6a4fc5767cf8c92bad
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp310-cp310-manylinux_2_28_aarch64.whl
| Download URL | roastedduck-1.5.6.post2-cp310-cp310-manylinux_2_28_aarch64.whl |
|---|---|
| Size | 64.4 MB |
| Tags | CPython 3.10 Linux glibc 2.28+ ARM64 |
|
SHA-256 checksum How to use checksums |
197f3179cca504a124dd9c01f0d016c5176fa93829e5dea463b6f0f500e91f0e
|
|
BLAKE2b-256 checksum How to use checksums |
1eb48dca2166e6129f101553c37e6c28ab8cda62955188cb0e9c1eb7abe321db
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logRelease files / roastedduck-1.5.6.post2-cp310-cp310-macosx_11_0_arm64.whl
| Download URL | roastedduck-1.5.6.post2-cp310-cp310-macosx_11_0_arm64.whl |
|---|---|
| Size | 23.0 MB |
| Tags | CPython 3.10 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
edbd93adad13a6951e35a405747a6886ceb4b2d3c4ed7df546cbd7a9fe4ca4b3
|
|
BLAKE2b-256 checksum How to use checksums |
c11b8ecf69fb07dd66e162e56bdb1149532e823af0275a16cfeda8c1ee3386ba
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logSecurity for roastedduck 1.5.6.post2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 16 files in this release have been uploaded with provenance metadata.
Attestation for roastedduck-1.5.6.post2.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
