Ross ROSS = Recommend OSS · open-source software intelligence for agents

pyupio/safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected. observed · 2026-08-28

github.com/pyupio/safety · homepage · Python observed · 2026-08-28

Health v2 · maintenance only

94/100

  • Activity 98
  • Release rhythm 86
  • Longevity 100

Flags: no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 21
  • age_days: 3605
  • days_rel: 96
  • days_push: 13
  • n_releases_24m: 20

Full methodology

Adoption not part of the score

1995 stars · 203 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Safety CLI is a Python dependency vulnerability scanner that detects packages with known vulnerabilities and malicious packages in local development, CI/CD, and production environments. It provides actionable remediation recommendations, can auto-update requirements files, and integrates with CI pipelines via a GitHub Action.

Use cases

  • scan python requirements.txt for known vulnerabilities
  • check pip dependencies for CVEs in CI
  • find malicious python packages in my environment
  • generate SBOM for python project dependencies
  • auto-upgrade vulnerable packages to fixed versions
  • run dependency security scan in github actions

When to choose

  • you need a dedicated Python dependency vulnerability scanner with remediation suggestions
  • you want CI/CD integration via GitHub Actions or JSON/SBOM/HTML output
  • you need malicious package detection and system-wide scans beyond a single lockfile

When to avoid

  • you need multi-language SCA (Java/JavaScript) without a paid Safety platform subscription
  • you require fully offline scanning with no account or proprietary database dependency
  • you want a permissively licensed tool - the repo has no open license and full features are commercial

Facets

cli-tool · maturity active

security vulnerability-scanning dependency-audit cli ci-cd security developer-tools python cli cross-platform python-dependencies sca software-supply-chain vulnerability-database sbom malicious-packages python devops

8 sources

Member repositories

RepositoryRoleHealth v2
pyupio/safetymain94

For agents

markdown · JSON · MCP: product_card(name="pyupio/safety")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem