zerodep

Zero-dependency, single-file Python implementations of popular libraries — stdlib only, benchmarked for performance parity, Python 3.10+.

零依赖、单文件的 Python 常用库实现 —— 仅使用标准库，性能对标主流库，支持 Python 3.10+。

English Docs | 中文文档

Quick Start

pip install zerodep          # install the CLI
zerodep add yaml retry       # copy modules into your project

from yaml import load, dump

data = load("name: Alice\nage: 30")
print(data)  # {'name': 'Alice', 'age': 30}

Each module is a self-contained single .py file — copy it into your project and import. No pip install needed at runtime.

Modules

Modules span Agent Protocols, Web & Networking, Data Formats, Data Validation, Text & Markup, Search & Retrieval, Configuration, CLI & Terminal, Security, and Infrastructure & Tools.

See the full module list for details, versions, and benchmarks.

Versioning

Project: CalVer YYYY.M.D (e.g., 2026.4.15)
Modules: independent SemVer per module (e.g., 0.4.1)

Releases are automated via the Release workflow — lint, test, bump module versions, tag, and create a GitHub Release in one step.

Documentation

English: zerodep.readthedocs.io/en/
中文: zerodep.readthedocs.io/zh-cn/
Benchmarks: Live benchmark dashboard

Citation

If you use zerodep in your research, please cite our paper:

@article{ding2026stdlib,
  title={Stdlib or Third-Party? Empirical Performance and Correctness of LLM-Assisted Zero-Dependency Python Libraries},
  author={Ding, Peng and Stevens, Rick},
  journal={arXiv preprint arXiv:2605.21405},
  year={2026}
}

License

MIT

test bench-aes bench-aiosqlite bench-qr bench-http bench-dotenv bench-yaml bench-jsonx bench-structlog bench-retry bench-tabulate bench-soup bench-validate bench-sse bench-markdown bench-diff bench-scheduler bench-search bench-semantic-search bench-frontmatter bench-config bench-cache bench-xml bench-jsonrpc bench-protobuf bench-a2a bench-acp bench-semver bench-runner bench-readability bench-png bench-useragent bench-httpserver bench-websocket bench-cdp bench-multipart bench-s3 bench-ratelimit bench-jsonschema bench-profiler dev

Metadata

Release files for zerodep 2026.10.24

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for zerodep 2026.10.24
File	Size	Uploaded	Provenance
zerodep-2026.10.24.tar.gz	38.4 kB	Oct 24, 2026	With provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for zerodep 2026.10.24
File	Interpreter	ABI	Platform	Reset
zerodep-2026.10.24-py3-none-any.whl 36.4 kB Oct 24, 2026 With provenance	Python 3	none	any	Details

Total release size: 74.9 kB

Release files / zerodep-2026.10.24.tar.gz

Download URL	zerodep-2026.10.24.tar.gz
Size	38.4 kB
Tags	Source
SHA-256 checksum How to use checksums	`b786f8b52cb5e62d560367f3caaa0b617f04e5aabb87f816008e0ced95717173`
BLAKE2b-256 checksum How to use checksums	`713a1a0c6143e8f0b3622becf4a1830c1b3b9155fa06af517e2960807efe1aae`
Upload date	Oct 24, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.16`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/Oaklight/zerodep
Publishing commit: github.com/Oaklight/zerodep/tree/a80d318dcfe8362222a36c07a69791e04f47ad42

Workflow

Publishing configuration: github.com/Oaklight/zerodep/blob/a80d318dcfe8362222a36c07a69791e04f47ad42/.github/workflows/release.yml
Publishing logs: github.com/Oaklight/zerodep/actions/runs/40105910725/attempts/1

Artifact

Subject: zerodep-2026.10.24.tar.gz
SHA-256 checksum: b786f8b52cb5e62d560367f3caaa0b617f04e5aabb87f816008e0ced95717173 Verifying attestations

Release files / zerodep-2026.10.24-py3-none-any.whl

Download URL	zerodep-2026.10.24-py3-none-any.whl
Size	36.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`a7247d12ccbbe3b658e383ddd09982fe5b7dc54ff4002dcfd0a4714baa695e00`
BLAKE2b-256 checksum How to use checksums	`0bb8a14128477c2842b3e43fb40334202f3afddc7e578cf2efe003c25891a392`
Upload date	Oct 24, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.16`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/Oaklight/zerodep
Publishing commit: github.com/Oaklight/zerodep/tree/a80d318dcfe8362222a36c07a69791e04f47ad42

Workflow

Publishing configuration: github.com/Oaklight/zerodep/blob/a80d318dcfe8362222a36c07a69791e04f47ad42/.github/workflows/release.yml
Publishing logs: github.com/Oaklight/zerodep/actions/runs/40105910725/attempts/1

Artifact

Subject: zerodep-2026.10.24-py3-none-any.whl
SHA-256 checksum: a7247d12ccbbe3b658e383ddd09982fe5b7dc54ff4002dcfd0a4714baa695e00 Verifying attestations

Security for zerodep 2026.10.24

Report project as malware

Provenance

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Attestation for zerodep-2026.10.24.tar.gz

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/Oaklight/zerodep
Publishing commit: github.com/Oaklight/zerodep/tree/a80d318dcfe8362222a36c07a69791e04f47ad42

Workflow

Publishing configuration: github.com/Oaklight/zerodep/blob/a80d318dcfe8362222a36c07a69791e04f47ad42/.github/workflows/release.yml
Publishing logs: github.com/Oaklight/zerodep/actions/runs/40105910725/attempts/1

Artifact

Subject: zerodep-2026.10.24.tar.gz
SHA-256 checksum: b786f8b52cb5e62d560367f3caaa0b617f04e5aabb87f816008e0ced95717173 Verifying attestations

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.