security/py-pwdlib - The NetBSD Packages Collection

Modern password hashing for Python

For years, the de-facto standard to hash passwords was passlib.
Unfortunately, it has not been very active recently and its
maintenance status is under question. Starting Python 3.13, passlib
won't work anymore.

That's why I decided to start pwdlib, a password hash helper for
the modern Python era. However, it's not designed to be a complete
replacement for passlib, which supports numerous hashing algorithms
and features.

- Goals

    Provide an easy-to-use wrapper to hash and verify passwords
    Support modern and secure algorithms like Argon2 or Bcrypt

- Non-goals

    Support legacy hashing algorithms like MD5

    Implement algorithms directly - we should only rely on existing
    and battle-tested implementations

Build dependencies

devel/py-hatchling devel/py-build misc/py-installer pkgtools/mktools pkgtools/cwrappers

Runtime dependencies

security/py-argon2-cffi security/py-bcrypt lang/python314 lang/python314

Binary packages

OSArchitectureVersion
(none)

Binary packages can be installed with the high-level tool pkgin (which can be installed with pkg_add) or pkg_add(1) (installed by default). The NetBSD packages collection is also designed to permit easy installation from source.

Available build options

(none)

Known vulnerabilities

The pkg_admin audit command locates any installed package which has been mentioned in security advisories as having vulnerabilities.

Please note the vulnerabilities database might not be fully accurate, and not every bug is exploitable with every configuration.


Problem reports, updates or suggestions for this package should be reported with send-pr.