audit: sweep Configuration Files, drop python-decouple

Tiers: configparser (stdlib, leads the use case under the stdlib-first
ordering rule), python-dotenv (782.2M/mo) obvious choices —
pydantic-settings joins them in its own addition commit; hydra-core
(23.8M/mo — renamed from hydra to its canonical PyPI name; the cache's
bare hydra row is an ancient unrelated package; link updated to
hydra-ecosystem/hydra, where the facebookresearch repo now redirects,
target verified by description) and dynaconf (6.8M/mo) challengers.

Removed:
- python-decouple — repo dormant since 2024-11, last release 3.8 in
  2023-03, three and a half years past any release and past the
  12-month activity line. 8.4M downloads/month, 3.0K stars.
  Displaced by pydantic-settings (495M/mo) entering next.

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Vinta Chen
2026-08-16 13:53:51 +08:00
co-authored by Claude
parent 9f9bd8db1f
commit 5a8c062f6d
+2 -3
View File
@@ -1074,10 +1074,9 @@ _Libraries to create packaged executables for release distribution._
_Libraries for storing and parsing configuration options._
- [configparser](https://docs.python.org/3/library/configparser.html) - (Python standard library) INI file parser.
- [dynaconf](https://github.com/dynaconf/dynaconf) - Dynaconf is a configuration manager with plugins for Django, Flask and FastAPI.
- [hydra](https://github.com/facebookresearch/hydra) - Hydra is a framework for elegantly configuring complex applications.
- [python-decouple](https://github.com/HBNetwork/python-decouple) - Strict separation of settings from code.
- [python-dotenv](https://github.com/theskumar/python-dotenv) - Reads key-value pairs from a `.env` file and sets them as environment variables.
- [hydra-core](https://github.com/hydra-ecosystem/hydra) - Hydra is a framework for elegantly configuring complex applications.
- [dynaconf](https://github.com/dynaconf/dynaconf) - Dynaconf is a configuration manager with plugins for Django, Flask and FastAPI.
**Security**