riivault_

cryptography

pypi package · declared by 96 of 2,343 sampled repositories · graph computed 2026-08-24

Counted from the runtime dependencies public repositories declare — not the resolved tree. A transitive dependency is a consequence; a declared one is a choice. Development dependencies are excluded because they repeat across every project in a language regardless of what is being built.

Declared with

ranked by association, not by count
Declared withRepositoriesvs chance
pyjwt16 of 2,3430.50
apscheduler9 of 2,3430.49
sqlalchemy17 of 2,3430.44
aiosqlite10 of 2,3430.43
pypdf9 of 2,3430.42
starlette11 of 2,3430.42
fastapi39 of 2,3430.42
uvicorn36 of 2,3430.41
aiohttp17 of 2,3430.39
alembic9 of 2,3430.38
websockets12 of 2,3430.37
httpx30 of 2,3430.36
aiofiles10 of 2,3430.35
playwright9 of 2,3430.35
pydantic-settings17 of 2,3430.35
python-multipart15 of 2,3430.34
python-dotenv28 of 2,3430.33
pydantic34 of 2,3430.29
mcp12 of 2,3430.26
psutil9 of 2,3430.25

Every pair above is counted from the same evidence: repo manifest.

Used instead

candidates · shares a neighbourhood and refuses to co-occur

No alternative measured. A pair qualifies only if it shares a neighbourhood and then fails to appear together against an expectation that it would — and almost everything that shares a neighbourhood does appear together. That is the test working, not a gap in the data: similarity alone would list this tool’s closest neighbours as alternatives, and most of them are things it is used with.