
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
maison
Advanced tools
Read configuration settings from configuration files.
📚 View Documentation | 🐛 Report a Bug | ✨ Request a Feature
When developing a python package, e.g a command-line tool, it can be helpful
to allow the user to set their own configuration options to allow them to tailor
the tool to their needs. These options are typically set in files in the root of
a user's directory that uses the tool, for example in a pyproject.toml or an
{project_name}.ini file.
maison aims to provide a simple and flexible way to read and validate those
configuration options so that they may be used in the package.
You can install maison via pip from PyPI:
pip install maison
To set up maison for local development:
git clone https://github.com/dbatten/maison.git
cd maison
uv:
uv sync
uvx nox -s pre-commit -- install
This sets up a virtual environment and installs core, development, and quality check dependencies.
Suppose the following pyproject.toml lives somewhere in a user's directory:
[tool.acme]
enable_useful_option = true
maison exposes a UserConfig class to retrieve values from config files
like so:
from maison import UserConfig
from my_useful_package import run_useful_action
config = UserConfig(package_name="acme")
if config.values["enable_useful_option"]:
run_useful_action()
This project uses a robust set of tools for development, testing, and quality assurance. All significant automated tasks are run via :term:Nox, orchestrated by the central noxfile.py.
uvx nox -s checkuvx nox -s testuvx nox -s docsuvx nox -s builduvx nox -lExplore the noxfile.py and the project documentation for detailed information on the automated workflow.
(This section should guide contributions to this specific generated project, not the template. It should refer to the project's CODE_OF_CONDUCT.md and link to a CONTRIBUTING.md specific to the project, if you choose to generate one.)
Report bugs or suggest features via the issue tracker.
See CONTRIBUTING.md for contribution guidelines.
Distributed under the terms of the MIT license. See LICENSE for details.
This project was generated from the cookiecutter-robust-python template.
FAQs
Read settings from config files
We found that maison demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.