Skip to content
This repository was archived by the owner on Jul 30, 2026. It is now read-only.
This repository was archived by the owner on Jul 30, 2026. It is now read-only.

Optional permissive engine: keepass-rs (MIT) behind the vault.py seam #2

Description

@nabsha

The default engine pykeepass is GPL-3.0 — fetched at runtime, never bundled, so this MIT project is honest (see NOTICE). The only foreclosed case is a downstream closed-source product that bundles the engine.

kdbx_core/vault.py already exposes an engine-agnostic interface as the single swap point. To erase the carve-out, add an MIT engine (the Rust keepass-rs via a PyO3/maturin wheel).

Caveats before doing this: KDBX4 write is upstream-labeled experimental (round-trip validation mandatory for a credential store), and it requires owning cross-platform wheel CI. Only fund when a real closed-source-bundling consumer appears.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    backlogDeferred — not scheduled for current workenhancementNew feature or requestskill: kdbxConcerns the kdbx skill

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions