pysftp-ng 0.3.0__tar.gz

pysftp_ng-0.3.0/.gitignore

@@ -0,0 +1,21 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+.eggs/
+build/
+dist/
+.venv/
+venv/
+.nox/
+# A library: CI tests dependency ranges, so no lock file is kept
+uv.lock
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+.coverage
+.coverage.*
+coverage.xml
+htmlcov/
+.DS_Store
+.idea/
+.vscode/

pysftp_ng-0.3.0/CHANGELOG.md

@@ -0,0 +1,63 @@
+# Changelog
+
+All notable changes are listed here. pysftp-ng follows [Semantic Versioning](https://semver.org/).
+Until 1.0, minor releases may deprecate things but won't remove anything from the pysftp 0.2.9
+API.
+
+## 0.3.0 (unreleased)
+
+First release of pysftp-ng, forked from pysftp 0.2.9 (released 2016-07-04).
+
+### Fixed
+
+- `import pysftp` no longer fails on paramiko 4.0 and later, which removed `DSSKey`.
+- Ed25519 and ECDSA private key files now load, encrypted or not, in OpenSSH or PEM format.
+  Any `paramiko.PKey` object, not only `RSAKey` or `AgentKey`, can be passed as `private_key`.
+- With no password or key given, the default keys `~/.ssh/id_rsa`, `id_ecdsa` and `id_ed25519`
+  (and `id_dsa` on paramiko < 4) are each tried, and the first one the server accepts is used.
+- known_hosts entries in OpenSSH's `[host]:port` form, plain or hashed, are now found for servers
+  on non-standard ports. Bare hostname entries still work.
+- Host key verification now negotiates only key types listed in known_hosts and accepts any
+  matching key, instead of pinning the first key found. This fixes "Incompatible ssh peer
+  (no acceptable host key)" when a retired key type or an old `ssh-dss` line came first.
+- A connection that fails part-way no longer raises
+  `AttributeError: 'Connection' object has no attribute '_sftp_live'` from `__del__`, and its
+  transport is closed instead of left running.
+- `close()` removes only the log handler the connection added and restores the logger's level.
+  It used to delete every handler on the `paramiko` logger.
+- `put_r` and `put_d` join remote paths with `/` on every OS instead of `os.path.join`, which sent
+  backslashes from Windows. They no longer `chdir` the whole process.
+- `get_r` builds local paths correctly on Windows, creates missing local directories, and
+  reports broken symlinks to the unknown-type callback instead of crashing.
+- `walktree` uses one `listdir_attr` call per directory instead of a `stat` per entry.
+- `get_r`, `get_d` and `walktree` skip, with a `RuntimeWarning`, file names from the server that
+  would escape the target directory (for example `../x`).
+- `execute()` closes its channel.
+- `makedirs` splits remote paths with `posixpath`.
+- The missing-known_hosts warning reads "disable HostKey checking" (it said "disableHostKey").
+- `path_advance` and `path_retreat` handle an empty path.
+
+### Added
+
+- `CnOpts.timeout`: limit, in seconds, for the TCP connection, SSH banner, key exchange and
+  authentication.
+- `CnOpts.get_hostkey(host, port=22)` takes an optional port.
+- `BadHostKeyException` and `PasswordRequiredException` are re-exported from `pysftp`.
+- Type hints and a `py.typed` marker.
+- An in-process SFTP server and a test suite covering the API across Python and paramiko
+  versions.
+
+### Changed
+
+- Requires Python 3.9+ and paramiko 3.4+. paramiko 3.4 is the first release with the fix for the
+  Terrapin attack (CVE-2023-48795).
+- A server key that doesn't match known_hosts raises `paramiko.BadHostKeyException`. It is a
+  subclass of `SSHException`, so existing `except SSHException` blocks still catch it.
+- Connection refused or unreachable still raises `SSHException("Unable to connect to ...")`, but
+  pysftp-ng now opens the socket itself, so a failed connect no longer leaks it.
+- `str(ConnectionException)` is now the human-readable message. `.args` is unchanged.
+- The deprecated `log` and `ciphers` arguments to `Connection` are no longer scheduled for removal
+  in 0.3.0. They will be removed no earlier than 1.0.
+- If no username is given and `LOGNAME` isn't set, the current OS user is used (`getpass.getuser()`).
+
+For changes before the fork, see the pysftp 0.2.9 changelog.

pysftp_ng-0.3.0/CONTRIBUTING.md

@@ -0,0 +1,70 @@
+# Contributing
+
+Thanks for helping. pysftp-ng exists so that code written against pysftp 0.2.9 keeps working, so
+compatibility comes first.
+
+## Ground rules
+
+- **Don't break the 0.2.9 API.** Keep public names, arguments, defaults and return values as they
+  are. New behaviour should be opt-in, normally through `CnOpts`.
+- **Every bug fix comes with a test.** If the bug exists in pysftp 0.2.9, mark the test
+  `@pytest.mark.regression`.
+- **Security-sensitive changes need extra care.** That covers host keys, authentication and path
+  handling. Explain the threat model in the pull request.
+- **Small pull requests.** One fix or feature per pull request is much easier to review.
+- **Understand what you submit.** Tools are fine, but you should be able to explain and defend
+  every line in review.
+
+## Development setup
+
+You need Python 3.9 or newer. With [uv](https://docs.astral.sh/uv/):
+
+```bash
+uv venv
+uv pip install -e . --group dev
+uv run pytest
+```
+
+Or with pip:
+
+```bash
+python -m venv .venv
+source .venv/bin/activate        # .venv\Scripts\activate on Windows
+pip install -e . pytest pytest-cov ruff
+pytest
+```
+
+The tests start a small SFTP server inside the test process (`tests/sftp_server.py`), so you don't
+need Docker or a real server.
+
+To test against a specific paramiko version:
+
+```bash
+uv run --with "paramiko==3.4.1" pytest
+```
+
+Don't install the version with `uv pip install` first: `uv run` resets the environment to match
+`uv.lock` before it starts, so the tests would run against the paramiko version in `uv.lock`
+instead. The pytest header shows which paramiko version was used.
+
+To run the full matrix (every supported Python with paramiko 3.4.1 and the newest release), plus
+lint and a build check, use [nox](https://nox.thea.codes/). It downloads any Python you don't have:
+
+```bash
+uvx nox              # everything
+uvx nox -s lint      # one session; `uvx nox -l` lists them
+```
+
+## Style
+
+[ruff](https://docs.astral.sh/ruff/) handles linting and formatting:
+
+```bash
+ruff check .
+ruff format .
+```
+
+## Releases
+
+Maintainers cut releases from GitHub. The release workflow builds the package and publishes it to
+PyPI through trusted publishing, so no API tokens are stored in the repository.

pysftp_ng-0.3.0/LICENSE

@@ -0,0 +1,28 @@
+BSD 3-Clause License
+
+Copyright (c) 2014, Dundee Media & Technology, Inc
+Copyright (c) 2026, Abdul Hakim Aremeyaw and pysftp-ng contributors
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+    * Redistributions of source code must retain the above copyright notice,
+    this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright notice,
+    this list of conditions and the following disclaimer in the documentation
+    and/or other materials provided with the distribution.
+    * Neither the name of the Dundee Media & Technology, Inc nor the names of
+    its contributors may be used to endorse or promote products derived from
+    this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

pysftp_ng-0.3.0/PKG-INFO

@@ -0,0 +1,144 @@
+Metadata-Version: 2.5
+Name: pysftp-ng
+Version: 0.3.0
+Summary: A friendly face on SFTP. Maintained, drop-in fork of pysftp for paramiko 4/5 and current Python.
+Project-URL: Homepage, https://github.com/Vitalik-Hakim/pysftp-ng
+Project-URL: Source, https://github.com/Vitalik-Hakim/pysftp-ng
+Project-URL: Issues, https://github.com/Vitalik-Hakim/pysftp-ng/issues
+Project-URL: Changelog, https://github.com/Vitalik-Hakim/pysftp-ng/blob/main/CHANGELOG.md
+Author: Jeff Hinrichs, Abdul Hakim Aremeyaw
+Maintainer: Abdul Hakim Aremeyaw
+License-Expression: BSD-3-Clause
+License-File: LICENSE
+Keywords: file transfer,ftp,paramiko,pysftp,sftp,ssh
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: Implementation :: CPython
+Classifier: Topic :: Internet :: File Transfer Protocol (FTP)
+Classifier: Topic :: System :: Networking
+Classifier: Typing :: Typed
+Requires-Python: >=3.9
+Requires-Dist: paramiko>=3.4
+Description-Content-Type: text/markdown
+
+# pysftp-ng
+
+[![CI](https://github.com/Vitalik-Hakim/pysftp-ng/actions/workflows/ci.yml/badge.svg)](https://github.com/Vitalik-Hakim/pysftp-ng/actions/workflows/ci.yml)
+[![PyPI](https://img.shields.io/pypi/v/pysftp-ng.svg)](https://pypi.org/project/pysftp-ng/)
+[![Python](https://img.shields.io/pypi/pyversions/pysftp-ng.svg)](https://pypi.org/project/pysftp-ng/)
+
+A maintained, drop-in fork of [pysftp](https://pypi.org/project/pysftp/). Your code still says
+`import pysftp` and uses the same API, but it now works with current paramiko (3.4 through 5.x)
+and Python 3.9 through 3.14.
+
+## Why this exists
+
+pysftp 0.2.9 came out in July 2016 and is still installed around 11.8 million times a month.
+It no longer works with current dependencies. paramiko 4.0 removed DSA keys, so a fresh
+`pip install pysftp` now fails the moment you import it:
+
+```
+ImportError: cannot import name 'DSSKey' from 'paramiko'
+```
+
+There has been no upstream release since 2016. pysftp-ng fixes that break and a set of
+long-standing bugs, and keeps the API stable so existing code keeps running.
+
+## Switching over
+
+```bash
+pip uninstall -y pysftp
+pip install pysftp-ng
+```
+
+No code changes are needed. In `requirements.txt` or `pyproject.toml`, replace `pysftp` with
+`pysftp-ng`. Don't install both packages, because they provide the same `pysftp` module.
+
+## Usage
+
+```python
+import pysftp
+
+with pysftp.Connection("sftp.example.com", username="me", private_key="~/.ssh/id_ed25519") as sftp:
+    sftp.put("report.csv", "/upload/report.csv")
+    with sftp.cd("/download"):
+        sftp.get_r(".", "local-copy")
+```
+
+Extra connection options go on a `CnOpts` object:
+
+```python
+cnopts = pysftp.CnOpts()  # loads ~/.ssh/known_hosts
+cnopts.timeout = 10  # new: limit for connecting, the handshake and logging in
+
+with pysftp.Connection(
+    "sftp.example.com", port=2222, username="me", password="...", cnopts=cnopts
+) as sftp:
+    print(sftp.listdir())
+```
+
+## What's fixed compared with pysftp 0.2.9
+
+Each item below has a test in `tests/`. Tests marked `regression` reproduce bugs in pysftp 0.2.9.
+
+- **paramiko 4 and 5.** Imports and runs without DSA. On paramiko < 4, DSA keys still work.
+- **Modern keys.** Ed25519 and ECDSA key files work, encrypted or not, in OpenSSH or PEM format.
+  You can also pass any paramiko key object, such as `Ed25519Key` or `AgentKey`, as `private_key`.
+- **Default keys.** With no password or key given, pysftp-ng tries `~/.ssh/id_rsa`, `id_ecdsa` and
+  `id_ed25519` in OpenSSH's order and uses the first one the server accepts. 0.2.9 only looked
+  for `id_rsa` and `id_dsa`.
+- **known_hosts on non-standard ports.** OpenSSH stores these as `[host]:port`, including in hashed
+  form. pysftp-ng finds them; 0.2.9 failed with "No hostkey for host ... found".
+- **Hosts with several known keys.** pysftp-ng only negotiates key types that are in known_hosts
+  and accepts any key that matches. 0.2.9 pinned whichever key was listed first. If the server had
+  retired that key type, or the first line was an old `ssh-dss` key, the connection failed with
+  "Incompatible ssh peer".
+- **Cleaner failures.** No more `AttributeError: 'Connection' object has no attribute '_sftp_live'`
+  hiding the real error. A failed connection closes its transport.
+- **Logging.** `close()` removes only the log handler it added. 0.2.9 removed every handler on the
+  `paramiko` logger, including your application's.
+- **Windows paths.** `put_r` and `put_d` build remote paths with `/` on every OS (0.2.9 sent
+  backslashes from Windows), and they no longer change the process's working directory.
+- **`get_r`.** Works on Windows clients, creates missing local directories, and no longer crashes
+  on a broken symlink.
+- **Speed.** `walktree` sends one listing request per directory instead of one `stat` per entry.
+- **Path traversal.** If a server returns a file name that would land outside the target
+  directory, such as `../../.bashrc`, `get_r`, `get_d` and `walktree` skip it with a warning.
+- **Smaller fixes.** New `CnOpts.timeout` option. The username falls back to the OS user when
+  `LOGNAME` isn't set, as on Windows. `ConnectionException` has a readable message.
+
+## Compatibility
+
+- The public API of pysftp 0.2.9 is kept: same names, arguments and return values. The deprecated
+  `log` and `ciphers` arguments still work and emit a `DeprecationWarning`.
+- Behaviour changes are limited to the fixes above. The [changelog](CHANGELOG.md) lists every one.
+- The test suite runs against Python 3.9–3.14 and paramiko 3.4, 3.5, 4.0 and 5.1. It uses an
+  in-process SFTP server, so no external server is needed.
+
+## Security
+
+Host key checking is on by default and verifies the server before any password or key is sent.
+Setting `cnopts.hostkeys = None` turns verification off and exposes you to man-in-the-middle
+attacks, so don't do it outside a test environment.
+
+To report a vulnerability, see [SECURITY.md](SECURITY.md).
+
+## Credits
+
+pysftp was written by Jeff Hinrichs (Dundee Media & Technology), with contributions from Don
+Reilly, James Kruth and Nick Robinson-Wall. pysftp-ng is forked from the 0.2.9 release and keeps
+its BSD 3-Clause license.
+
+## Contributing
+
+Bug reports and pull requests are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md).

pysftp_ng-0.3.0/README.md

@@ -0,0 +1,111 @@
+# pysftp-ng
+
+[![CI](https://github.com/Vitalik-Hakim/pysftp-ng/actions/workflows/ci.yml/badge.svg)](https://github.com/Vitalik-Hakim/pysftp-ng/actions/workflows/ci.yml)
+[![PyPI](https://img.shields.io/pypi/v/pysftp-ng.svg)](https://pypi.org/project/pysftp-ng/)
+[![Python](https://img.shields.io/pypi/pyversions/pysftp-ng.svg)](https://pypi.org/project/pysftp-ng/)
+
+A maintained, drop-in fork of [pysftp](https://pypi.org/project/pysftp/). Your code still says
+`import pysftp` and uses the same API, but it now works with current paramiko (3.4 through 5.x)
+and Python 3.9 through 3.14.
+
+## Why this exists
+
+pysftp 0.2.9 came out in July 2016 and is still installed around 11.8 million times a month.
+It no longer works with current dependencies. paramiko 4.0 removed DSA keys, so a fresh
+`pip install pysftp` now fails the moment you import it:
+
+```
+ImportError: cannot import name 'DSSKey' from 'paramiko'
+```
+
+There has been no upstream release since 2016. pysftp-ng fixes that break and a set of
+long-standing bugs, and keeps the API stable so existing code keeps running.
+
+## Switching over
+
+```bash
+pip uninstall -y pysftp
+pip install pysftp-ng
+```
+
+No code changes are needed. In `requirements.txt` or `pyproject.toml`, replace `pysftp` with
+`pysftp-ng`. Don't install both packages, because they provide the same `pysftp` module.
+
+## Usage
+
+```python
+import pysftp
+
+with pysftp.Connection("sftp.example.com", username="me", private_key="~/.ssh/id_ed25519") as sftp:
+    sftp.put("report.csv", "/upload/report.csv")
+    with sftp.cd("/download"):
+        sftp.get_r(".", "local-copy")
+```
+
+Extra connection options go on a `CnOpts` object:
+
+```python
+cnopts = pysftp.CnOpts()  # loads ~/.ssh/known_hosts
+cnopts.timeout = 10  # new: limit for connecting, the handshake and logging in
+
+with pysftp.Connection(
+    "sftp.example.com", port=2222, username="me", password="...", cnopts=cnopts
+) as sftp:
+    print(sftp.listdir())
+```
+
+## What's fixed compared with pysftp 0.2.9
+
+Each item below has a test in `tests/`. Tests marked `regression` reproduce bugs in pysftp 0.2.9.
+
+- **paramiko 4 and 5.** Imports and runs without DSA. On paramiko < 4, DSA keys still work.
+- **Modern keys.** Ed25519 and ECDSA key files work, encrypted or not, in OpenSSH or PEM format.
+  You can also pass any paramiko key object, such as `Ed25519Key` or `AgentKey`, as `private_key`.
+- **Default keys.** With no password or key given, pysftp-ng tries `~/.ssh/id_rsa`, `id_ecdsa` and
+  `id_ed25519` in OpenSSH's order and uses the first one the server accepts. 0.2.9 only looked
+  for `id_rsa` and `id_dsa`.
+- **known_hosts on non-standard ports.** OpenSSH stores these as `[host]:port`, including in hashed
+  form. pysftp-ng finds them; 0.2.9 failed with "No hostkey for host ... found".
+- **Hosts with several known keys.** pysftp-ng only negotiates key types that are in known_hosts
+  and accepts any key that matches. 0.2.9 pinned whichever key was listed first. If the server had
+  retired that key type, or the first line was an old `ssh-dss` key, the connection failed with
+  "Incompatible ssh peer".
+- **Cleaner failures.** No more `AttributeError: 'Connection' object has no attribute '_sftp_live'`
+  hiding the real error. A failed connection closes its transport.
+- **Logging.** `close()` removes only the log handler it added. 0.2.9 removed every handler on the
+  `paramiko` logger, including your application's.
+- **Windows paths.** `put_r` and `put_d` build remote paths with `/` on every OS (0.2.9 sent
+  backslashes from Windows), and they no longer change the process's working directory.
+- **`get_r`.** Works on Windows clients, creates missing local directories, and no longer crashes
+  on a broken symlink.
+- **Speed.** `walktree` sends one listing request per directory instead of one `stat` per entry.
+- **Path traversal.** If a server returns a file name that would land outside the target
+  directory, such as `../../.bashrc`, `get_r`, `get_d` and `walktree` skip it with a warning.
+- **Smaller fixes.** New `CnOpts.timeout` option. The username falls back to the OS user when
+  `LOGNAME` isn't set, as on Windows. `ConnectionException` has a readable message.
+
+## Compatibility
+
+- The public API of pysftp 0.2.9 is kept: same names, arguments and return values. The deprecated
+  `log` and `ciphers` arguments still work and emit a `DeprecationWarning`.
+- Behaviour changes are limited to the fixes above. The [changelog](CHANGELOG.md) lists every one.
+- The test suite runs against Python 3.9–3.14 and paramiko 3.4, 3.5, 4.0 and 5.1. It uses an
+  in-process SFTP server, so no external server is needed.
+
+## Security
+
+Host key checking is on by default and verifies the server before any password or key is sent.
+Setting `cnopts.hostkeys = None` turns verification off and exposes you to man-in-the-middle
+attacks, so don't do it outside a test environment.
+
+To report a vulnerability, see [SECURITY.md](SECURITY.md).
+
+## Credits
+
+pysftp was written by Jeff Hinrichs (Dundee Media & Technology), with contributions from Don
+Reilly, James Kruth and Nick Robinson-Wall. pysftp-ng is forked from the 0.2.9 release and keeps
+its BSD 3-Clause license.
+
+## Contributing
+
+Bug reports and pull requests are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md).

pysftp_ng-0.3.0/SECURITY.md

@@ -0,0 +1,26 @@
+# Security policy
+
+## Supported versions
+
+Security fixes go into the latest release. pysftp-ng is a drop-in replacement for pysftp 0.2.9,
+which gets no further fixes, so upgrading to pysftp-ng is the fix for issues in the original.
+
+## Reporting a vulnerability
+
+Please don't open a public issue for security problems. Report them privately through GitHub:
+open the repository's **Security** tab and choose **Report a vulnerability**.
+
+Include what you found, how to reproduce it, and which versions of pysftp-ng, paramiko and
+Python you used. You'll get an acknowledgement within 72 hours and a plan for a fix within a
+week. You'll be credited in the release notes unless you'd rather not be.
+
+## What counts
+
+Anything that weakens what pysftp-ng promises is in scope. Examples:
+
+- host key verification being skipped or bypassed
+- credentials being sent before the server is verified
+- files written outside the directory a transfer was aimed at
+- private key material leaking into logs or exceptions
+
+Bugs in paramiko itself should go to the [paramiko project](https://github.com/paramiko/paramiko).

pysftp_ng-0.3.0/pyproject.toml

@@ -0,0 +1,100 @@
+[build-system]
+requires = ["hatchling>=1.26"]
+build-backend = "hatchling.build"
+
+[project]
+name = "pysftp-ng"
+dynamic = ["version"]
+description = "A friendly face on SFTP. Maintained, drop-in fork of pysftp for paramiko 4/5 and current Python."
+readme = "README.md"
+requires-python = ">=3.9"
+license = "BSD-3-Clause"
+license-files = ["LICENSE"]
+authors = [
+    { name = "Jeff Hinrichs" },
+    { name = "Abdul Hakim Aremeyaw" },
+]
+maintainers = [{ name = "Abdul Hakim Aremeyaw" }]
+keywords = ["sftp", "ssh", "ftp", "paramiko", "pysftp", "file transfer"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "Intended Audience :: System Administrators",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: Implementation :: CPython",
+    "Topic :: Internet :: File Transfer Protocol (FTP)",
+    "Topic :: System :: Networking",
+    "Typing :: Typed",
+]
+dependencies = ["paramiko>=3.4"]
+
+[project.urls]
+Homepage = "https://github.com/Vitalik-Hakim/pysftp-ng"
+Source = "https://github.com/Vitalik-Hakim/pysftp-ng"
+Issues = "https://github.com/Vitalik-Hakim/pysftp-ng/issues"
+Changelog = "https://github.com/Vitalik-Hakim/pysftp-ng/blob/main/CHANGELOG.md"
+
+[dependency-groups]
+dev = [
+    "pytest>=8",
+    "pytest-cov>=5",
+    "ruff>=0.8",
+]
+
+[tool.hatch.version]
+path = "src/pysftp/__init__.py"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/pysftp"]
+
+[tool.hatch.build.targets.sdist]
+include = [
+    "src/pysftp",
+    "tests",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "SECURITY.md",
+    "CONTRIBUTING.md",
+]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = ["-ra", "--strict-markers"]
+markers = [
+    "regression: reproduces a bug present in pysftp 0.2.9",
+]
+filterwarnings = [
+    "error",
+    # paramiko itself still imports ciphers that cryptography has deprecated
+    "ignore::DeprecationWarning:paramiko.*",
+    "ignore:.*TripleDES.*",
+    "ignore:.*Blowfish.*",
+]
+
+[tool.coverage.run]
+source = ["pysftp"]
+branch = true
+
+[tool.ruff]
+line-length = 100
+target-version = "py39"
+src = ["src", "tests"]
+
+[tool.ruff.lint]
+select = ["E", "F", "W", "I", "B", "UP", "S", "PT", "RUF"]
+ignore = [
+    "UP007",  # keep Union[...] spelling where it is evaluated at runtime on 3.9
+    "RUF022", # __all__ is grouped by hand
+]
+
+[tool.ruff.lint.per-file-ignores]
+"tests/**" = ["S101", "S105", "S106", "S107", "S108", "S505", "S603", "S607"]