Skip to content

Add fastapi-guard - #3377

Open
rennf93 wants to merge 1 commit into
vinta:masterfrom
rennf93:add-fastapi-guard
Open

rennf93 wants to merge 1 commit into
vinta:masterfrom
rennf93:add-fastapi-guard

Conversation

@rennf93

@rennf93 rennf93 commented Oct 16, 2026 •

Copy link
Copy Markdown

Project

fastapi-guard

Checklist

  • I read CONTRIBUTING.md - awesome-python is a shortlist, not a catalog
  • One project per PR
  • PR title format: Add project-name
  • Entry format: - [pypi-name](https://github.com/owner/repo) - Description ending with period.
  • Display name is the PyPI package name
  • Placed in an existing use case (new sections and subcategories are maintainer-only)
  • Meets all Quality Requirements: active, stable, documented, at least 1 month old

Which Tier

Pick one:

  • Obvious choice - a tool an experienced Python developer would name when asked "what do I use for this?"
  • Challenger - not yet the obvious choice, but a credible successor to one. Give adoption-trajectory evidence, not popularity alone.

Explain:

I'm the author. fastapi-guard is request-level security middleware for FastAPI: IP and country allow and deny lists, rate limiting with automatic bans, SQL injection and XSS pattern detection, cloud-provider blocking and security headers. It sits next to the two current entries rather than overlapping them (nh3 sanitizes HTML, secure sets headers).

Adoption trajectory, PyPI downloads per month without mirrors (pypistats.org):

Month Downloads
2026-04 18,658
2026-05 35,522
2026-06 41,035
2026-07 40,319
2026-08 42,102
2026-09 67,068

Quality requirements: the repository was created on 2024-08-05, the last commit and release are from 2026-10-15 (v8.1.1, 65 GitHub releases), the PyPI classifier is "Development Status :: 5 - Production/Stable", and the docs are at https://guard-core.github.io/fastapi-guard/latest/. The license is MIT.

Displacement

Not needed: Web Security has 2 entries, so it is below the cap.

Project background: Guard Core's first library is fastapi-guard, public since August 2024 (first PyPI release, 0.1.0, on 2024-08-26). It has 825 GitHub stars, 65 releases and about 62,000 PyPI downloads in the last month (pypistats.org). The framework-agnostic engines and the adapters for other frameworks and languages came later and run the same detection rules, checked in CI against shared conformance fixtures.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant