
Security News
OpenClaw Advisory Surge Highlights Gaps Between GHSA and CVE Tracking
A recent burst of security disclosures in the OpenClaw project is drawing attention to how vulnerability information flows across advisory and CVE systems.
questo
Advanced tools
A library of extensible and modular CLI prompt elements
Questo provides a set of modular and extensible CLI elements. Unlike other libraries that provide ready-made functions, Questo exposes the internal state and event loop, allowing for complete customization of behavior and rendering.
| Element | Functionality |
|---|---|
Prompt | Text input with support for completions and cursor navigation |
Select | List selection with support for single/multi-select, filtering, and pagination |
From PyPI:
pip install questo
Using Poetry:
poetry add questo
Questo elements are designed to be used within your own event loop. This gives you full control over how keys are handled and how the element is rendered.
Each element in Questo consists of three main components:
Here is a complete example showing how to use Prompt and Select elements.
from yakh import get_key
from questo import prompt, select
# --- Prompt Example ---
# 1. Instantiate the element
name_prompt = prompt.Prompt()
# 2. Initialize the state
name_prompt.state = prompt.PromptState(title="What is your name?")
# 3. Run the event loop
with name_prompt.displayed():
while True:
# Get keypress
key = get_key()
# Update state based on keypress
name_prompt.state = prompt.key_handler(name_prompt.state, key)
# Check for exit or abort conditions
if name_prompt.state.exit or name_prompt.state.abort:
break
# 4. Get the result
name = name_prompt.result
if name:
print(f"Hello, {name}!")
# --- Select Example ---
# 1. Instantiate the element
color_select = select.Select()
# 2. Initialize the state
color_select.state = select.SelectState(
title="Choose a color:",
options=["Red", "Green", "Blue", "Yellow", "Magenta", "Cyan"],
page_size=3,
pagination=True
)
# 3. Run the event loop
with color_select.displayed():
while True:
key = get_key()
color_select.state = select.key_handler(color_select.state, key)
if color_select.state.exit or color_select.state.abort:
break
# 4. Get the result
color_index = color_select.result
if color_index is not None:
print(f"You chose: {color_select.state.options[color_index]}")
Because Questo exposes the state and renderer, you can easily customize the appearance and behavior.
You can provide a custom renderer function to change how the element looks.
from questo import prompt
def my_custom_renderer(state: prompt.PromptState) -> str:
return f"[bold green]{state.title}[/bold green]\n> {state.value}"
p = prompt.Prompt(renderer=my_custom_renderer)
You can wrap or replace the default key handler to add custom key bindings.
from questo import prompt
from yakh.key import Keys
def my_key_handler(state, key):
if key == Keys.TAB:
state.value = "TAB pressed!"
return state
return prompt.key_handler(state, key)
To start development you can clone the repository:
git clone https://github.com/petereon/questo.git
Change the directory to the project directory:
cd ./questo/
This project uses poetry as a dependency manager. You can install the dependencies using:
poetry install
For testing, this project relies on pytest.
poetry run poe test
The project is licensed under the MIT License.
FAQs
A library of extensible and modular CLI prompt elements
We found that questo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A recent burst of security disclosures in the OpenClaw project is drawing attention to how vulnerability information flows across advisory and CVE systems.

Research
/Security News
Mixed-script homoglyphs and a lookalike domain mimic imToken’s import flow to capture mnemonics and private keys.

Security News
Latio’s 2026 report recognizes Socket as a Supply Chain Innovator and highlights our work in 0-day malware detection, SCA, and auto-patching.