Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
By Ahmad Nassri - Dec 16, 2025
wheel
Artifacts are distributable versions of a package. It typically includes the source code and metadata
Advanced tools
- Version
- 0.41.3
- Maintainers
- 3
wheel
This is a command line tool for manipulating Python wheel files, as defined in
PEP 427_. It contains the following functionality:
- Convert
.eggarchives into.whl - Unpack wheel archives
- Repack wheel archives
- Add or remove tags in existing wheel archives
.. _PEP 427: https://www.python.org/dev/peps/pep-0427/
Historical note
This project used to contain the implementation of the setuptools_ bdist_wheel
command, but as of setuptools v70.1, it no longer needs wheel installed for that to
work. Thus, you should install this only if you intend to use the wheel command
line tool!
.. _setuptools: https://pypi.org/project/setuptools/
Documentation
The documentation_ can be found on Read The Docs.
.. _documentation: https://wheel.readthedocs.io/
Code of Conduct
Everyone interacting in the wheel project's codebases, issue trackers, chat
rooms, and mailing lists is expected to follow the PSF Code of Conduct_.
.. _PSF Code of Conduct: https://github.com/pypa/.github/blob/main/CODE_OF_CONDUCT.md
FAQs
A built-package format for Python
We found that wheel demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Research
/Security News
Malicious NuGet Package Typosquats Popular .NET Tracing Library to Steal Wallet Passwords
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.
By Kirill Boychenko - Dec 15, 2025
Security News
Deno 2.6 + Socket: Supply Chain Defense In Your CLI
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.
By Sarah Gooding - Dec 12, 2025