
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
maison
Advanced tools
Read configuration settings from configuration files.
📚 View Documentation | 🐛 Report a Bug | ✨ Request a Feature
When developing a python package, e.g a command-line tool, it can be helpful
to allow the user to set their own configuration options to allow them to tailor
the tool to their needs. These options are typically set in files in the root of
a user's directory that uses the tool, for example in a pyproject.toml or an
{project_name}.ini file.
maison aims to provide a simple and flexible way to read and validate those
configuration options so that they may be used in the package.
You can install maison via pip from PyPI:
pip install maison
To set up maison for local development:
git clone https://github.com/dbatten/maison.git
cd maison
uv:
uv sync
uvx nox -s pre-commit -- install
This sets up a virtual environment and installs core, development, and quality check dependencies.
Suppose the following pyproject.toml lives somewhere in a user's directory:
[tool.acme]
enable_useful_option = true
maison exposes a UserConfig class to retrieve values from config files
like so:
from maison import UserConfig
from my_useful_package import run_useful_action
config = UserConfig(package_name="acme")
if config.values["enable_useful_option"]:
run_useful_action()
This project uses a robust set of tools for development, testing, and quality assurance. All significant automated tasks are run via :term:Nox, orchestrated by the central noxfile.py.
uvx nox -s checkuvx nox -s testuvx nox -s docsuvx nox -s builduvx nox -lExplore the noxfile.py and the project documentation for detailed information on the automated workflow.
(This section should guide contributions to this specific generated project, not the template. It should refer to the project's CODE_OF_CONDUCT.md and link to a CONTRIBUTING.md specific to the project, if you choose to generate one.)
Report bugs or suggest features via the issue tracker.
See CONTRIBUTING.md for contribution guidelines.
Distributed under the terms of the MIT license. See LICENSE for details.
This project was generated from the cookiecutter-robust-python template.
FAQs
Read settings from config files
We found that maison demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.