# pallets/itsdangerous

Safely pass trusted data to untrusted environments and back.

Repository: https://github.com/pallets/itsdangerous
Canonical: https://ross.abutalabs.com/products/itsdangerous
Homepage: https://itsdangerous.palletsprojects.com
Language: Python
License: BSD-3-Clause
License Family: permissive
Topics: python, security, hmac, serialization, itsdangerous, pallets
Last push: 2025-06-14T20:35:46+00:00

## Health v2 (maintenance only)
Score: 34/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 26, release rhythm 8, longevity 100
- inputs: {"age_days": 5550, "days_push": 445, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3127, forks 277 (observed 2026-08-28T04:07:44.485801+00:00)

## What it is
ItsDangerous is a Python library for cryptographically signing data so it can be safely passed to untrusted environments (like cookies or URLs) and verified on return. It supports pluggable serialization, optional compression, and automatic timestamp verification of tokens.

## Use cases
- sign session data stored in cookies
- generate tamper-proof tokens for password reset links
- pass user data between web requests safely
- create expiring signed tokens with timestamps
- verify that a token has not been modified
- serialize and sign payloads for email confirmation links

## When to choose
- you need to trust client-held data without server-side storage
- you want HMAC-signed tokens with optional expiration
- you're building Flask or WSGI apps needing signed cookies

## When to avoid
- you need encrypted (not just signed) data
- you need multi-field JWTs with standard claims for third-party interop
- you need server-side session storage

## Facets
- artifact type: library
- maturity: stable
- function: serialization, cryptography, security
- domain: security, web-development, developer-tools
- platform: python
- tags: hmac, token-signing, tamper-proofing, pallets, flask-ecosystem

## Member repositories
- pallets/itsdangerous (main) score 34

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:44.485801+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:26:21.800409+00:00, confidence not recorded.
  - readme: https://github.com/pallets/itsdangerous (fetched 2026-08-28T04:07:44.485801+00:00, sha a3e791c4af02)
  - registry_pypi: https://pypi.org/pypi/itsdangerous/json (fetched 2026-08-29T09:41:49.575714+00:00, sha 5b6195d9605f)
- Data as of 2026-08-30T08:39:29.467469+00:00.