Add pyobfus to Distribution / Obfuscation - #3352
Closed
zhurong2020 wants to merge 1 commit into
Closed
zhurong2020 wants to merge 1 commit into
zhurong2020 wants to merge 1 commit into
Conversation
Collaborator
|
@zhurong2020 Thanks for the thorough and transparent write-up. A Challenger slot needs adoption-trajectory evidence, and pyobfus is at ~6k downloads/month versus ~313k for pyarmor. Happy to revisit as adoption grows. See CONTRIBUTING |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds pyobfus as a challenger entry under Distribution → Obfuscation (currently one entry, pyarmor; cap not reached, so no displacement argument is needed).
Quality requirements
Why a second entry in this use case
pyarmor protects bytecode; pyobfus takes the other design point — pure-AST, source-level, and it ships a reverse-mapping workflow (pyobfus --unmap) so an obfuscated production traceback can still be debugged by the maintainer or an AI assistant. It also has framework-aware presets (FastAPI/Django/Flask/Pydantic/Click/SQLAlchemy/ML) and a --check pre-flight scan with SARIF output. It is the only obfuscator in this use case with an MCP server and a VS Code extension.
Adoption evidence (honest)
PyPI about 2k downloads/month (pypistats, without mirrors), OpenSSF Best Practices passing badge (project 12788), PEP 740 attestations on every release. This is small next to pyarmor (about 290k/month); I am submitting as a challenger, not an obvious choice.
Disclosure: I maintain pyobfus.
Checked: not previously listed, no prior PR/issue for pyobfus found in this repo.