asteval VS evalidate

There is asteval project. It makes more poweful (ans slower) virtual python interpreter which you can use to run many commands in shared context. My benchmark (100 000 runs of simple python expressions):

If compare to asteval (which is actually has much more features), evalidate is much faster in my benchmarks (benchmark code in repo): 0.017s vs 1.232s

But, literals are not good enough very often, and one may want to do "len(foo)+bar[i]" , so I went searching trying to find a good implementation. I dug and found asteval, but this issue I raised breaks it for me, apart from the fact that I try not to rely on too many modules beyond the standard library + it has a bunch of peculiarities that make it not a real drop-in replacement to eval().

Here comes evalidate. Evalidate parses expression into AST-tree, and validates every node of tree. For example, you can forbid every function call (example with smartphone will still work, but os.system() will not) or you can whitelist specific safe functions like int(). It's simple to use:

Evalidate is python module for safe eval()'uating user-supplied (possible malicious) logical expressions in python syntax.