zerodep

Zero-dependency, single-file Python implementations of popular libraries — stdlib only, benchmarked for performance parity, Python 3.10+.

零依赖、单文件的 Python 常用库实现 —— 仅使用标准库，性能对标主流库，支持 Python 3.10+。

English Docs | 中文文档

Quick Start

pip install zerodep          # install the CLI
zerodep add yaml retry       # copy modules into your project

from yaml import load, dump

data = load("name: Alice\nage: 30")
print(data)  # {'name': 'Alice', 'age': 30}

Each module is a self-contained single .py file — copy it into your project and import. No pip install needed at runtime.

Modules

Modules span Agent Protocols, Web & Networking, Data Formats, Data Validation, Text & Markup, Search & Retrieval, Configuration, CLI & Terminal, Security, and Infrastructure & Tools.

See the full module list for details, versions, and benchmarks.

Versioning

Project: CalVer YYYY.M.D (e.g., 2026.4.15)
Modules: independent SemVer per module (e.g., 0.4.1)

Releases are automated via the Release workflow — lint, test, bump module versions, tag, and create a GitHub Release in one step.

Documentation

English: zerodep.readthedocs.io/en/
中文: zerodep.readthedocs.io/zh-cn/
Benchmarks: Live benchmark dashboard

Citation

If you use zerodep in your research, please cite our paper:

@article{ding2026stdlib,
  title={Stdlib or Third-Party? Empirical Performance and Correctness of LLM-Assisted Zero-Dependency Python Libraries},
  author={Ding, Peng and Stevens, Rick},
  journal={arXiv preprint arXiv:2605.21405},
  year={2026}
}

License

MIT

test bench-aes bench-aiosqlite bench-qr bench-http bench-dotenv bench-yaml bench-jsonx bench-structlog bench-retry bench-tabulate bench-soup bench-validate bench-sse bench-markdown bench-diff bench-scheduler bench-search bench-semantic-search bench-frontmatter bench-config bench-cache bench-xml bench-jsonrpc bench-protobuf bench-a2a bench-acp bench-semver bench-persistdict bench-runner bench-readability bench-png bench-useragent bench-httpserver bench-websocket bench-cdp bench-multipart bench-s3 bench-ratelimit bench-jsonschema bench-profiler dev

Metadata

Release files for zerodep 2026.10.23.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for zerodep 2026.10.23.2
File	Size	Uploaded	Provenance
zerodep-2026.10.23.2.tar.gz	29.8 kB	Oct 23, 2026	With provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for zerodep 2026.10.23.2
File	Interpreter	ABI	Platform	Reset
zerodep-2026.10.23.2-py3-none-any.whl 27.7 kB Oct 23, 2026 With provenance	Python 3	none	any	Details

Total release size: 57.5 kB

Release files / zerodep-2026.10.23.2.tar.gz

Download URL	zerodep-2026.10.23.2.tar.gz
Size	29.8 kB
Tags	Source
SHA-256 checksum How to use checksums	`3071b5afc21b0eff3d716d1428b78745bdf705c509e6566d72afadad4eb5f1a6`
BLAKE2b-256 checksum How to use checksums	`0335ff971589a3d8cdd58f9d87a0b5684187c32c9846df45bf9d973f3908dadf`
Upload date	Oct 23, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.16`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/Oaklight/zerodep
Publishing commit: github.com/Oaklight/zerodep/tree/990801c0a2ed7975a0ec8345f026341055ebb882

Workflow

Publishing configuration: github.com/Oaklight/zerodep/blob/990801c0a2ed7975a0ec8345f026341055ebb882/.github/workflows/release.yml
Publishing logs: github.com/Oaklight/zerodep/actions/runs/39998149447/attempts/1

Artifact

Subject: zerodep-2026.10.23.2.tar.gz
SHA-256 checksum: 3071b5afc21b0eff3d716d1428b78745bdf705c509e6566d72afadad4eb5f1a6 Verifying attestations

Release files / zerodep-2026.10.23.2-py3-none-any.whl

Download URL	zerodep-2026.10.23.2-py3-none-any.whl
Size	27.7 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`3fe7cc13d0406078183011e5861e07ee3ff94174c9b8ae2158ca78d231a2d752`
BLAKE2b-256 checksum How to use checksums	`f5fef4200e282c8236654a3b6941ac79a91587ca6841f3ec97e503600908de7e`
Upload date	Oct 23, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.16`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/Oaklight/zerodep
Publishing commit: github.com/Oaklight/zerodep/tree/990801c0a2ed7975a0ec8345f026341055ebb882

Workflow

Publishing configuration: github.com/Oaklight/zerodep/blob/990801c0a2ed7975a0ec8345f026341055ebb882/.github/workflows/release.yml
Publishing logs: github.com/Oaklight/zerodep/actions/runs/39998149447/attempts/1

Artifact

Subject: zerodep-2026.10.23.2-py3-none-any.whl
SHA-256 checksum: 3fe7cc13d0406078183011e5861e07ee3ff94174c9b8ae2158ca78d231a2d752 Verifying attestations

Security for zerodep 2026.10.23.2

Report project as malware

Provenance

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Attestation for zerodep-2026.10.23.2.tar.gz

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/Oaklight/zerodep
Publishing commit: github.com/Oaklight/zerodep/tree/990801c0a2ed7975a0ec8345f026341055ebb882

Workflow

Publishing configuration: github.com/Oaklight/zerodep/blob/990801c0a2ed7975a0ec8345f026341055ebb882/.github/workflows/release.yml
Publishing logs: github.com/Oaklight/zerodep/actions/runs/39998149447/attempts/1

Artifact

Subject: zerodep-2026.10.23.2.tar.gz
SHA-256 checksum: 3071b5afc21b0eff3d716d1428b78745bdf705c509e6566d72afadad4eb5f1a6 Verifying attestations

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.