https://github.com/pypa/pip-audit

pip python security security-audit supply-chain

Score: 28.20427870946338

Last synced: about 23 hours ago
JSON representation

Repository metadata:

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

Host: GitHub
URL: https://github.com/pypa/pip-audit
Owner: pypa
License: apache-2.0
Created: 2021-09-02T15:19:39.000Z (about 5 years ago)
Default Branch: main
Last Pushed: 2026-10-30T23:38:23.000Z (10 days ago)
Last Synced: 2026-11-06T04:29:46.912Z (3 days ago)
Topics: pip, python, security, security-audit, supply-chain
Language: Python
Homepage: https://pypi.org/project/pip-audit/
Size: 1.27 MB
Stars: 1,391
Watchers: 27
Forks: 154
Open Issues: 62
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE

Owner metadata:

Name: Python Packaging Authority
Login: pypa
Email: info@pypa.io
Kind: organization
Description:
Website: https://www.pypa.io
Location: United States of America
Twitter:
Company:
Icon url: https://avatars.githubusercontent.com/u/647025?v=4
Repositories: 60
Last Synced at: 2026-11-01T20:06:45.479Z
Profile URL: https://github.com/pypa

GitHub Events

Total

Create event: 85
Delete event: 92
Fork event: 18
Issue comment event: 108
Issues event: 23
Pull request event: 187
Pull request review comment event: 19
Pull request review event: 96
Push event: 143
Release event: 2
Watch event: 166
Total: 939

Last Year

Create event: 16
Delete event: 25
Fork event: 5
Issue comment event: 17
Issues event: 2
Pull request event: 33
Pull request review comment event: 9
Pull request review event: 14
Push event: 32
Watch event: 40
Total: 193

Committers metadata

Last synced: 2 days ago

Total Commits: 832
Total Committers: 45
Avg Commits per committer: 18.489
Development Distribution Score (DDS): 0.519

Commits in past year: 80
Committers in past year: 12
Avg Commits per committer in past year: 6.667
Development Distribution Score (DDS) in past year: 0.225

Name	Email	Commits
dependabot[bot]	4****]	400
William Woodruff	w**m@t**m	282
Alex Cameron	a**c@t**h	78
Dustin Ingram	d****i	15
Carlos Meza	c**s@d**m	5
Jeffrey Vandenborne	j**y@v**o	3
Mathieu Bouzard	1****u	3
Vladimir	5****n	3
copilot-swe-agent[bot]	1****t	3
Cooper Lees	c**r@f**m	2
Olexandr88	r**3@g**m	2
Nicolas Ganz	g**n@z**h	2
Andrew Pan	3****n	2
Adam Meily	a****y	1
Adrian Torres	a**j@h**e	1
Alain Anghelidi	3****i	1
Aleksandar Nikolić	A**n@g**m	1
Aryan Bagade	7****e	1
Braden Kelley	r**k@g**m	1
Charles Coulombe	c****e	1
Christian	m**6@g**m	1
Claudia Pellegrino	c****i	1
David JM Emmett	d**t@g**m	1
hseg	g**h@g**x	1
hantaee22	h**3@g**m	1
flamedphoenix	d**t@g**m	1
Thomas Klausner	w**z@g**t	1
Sugato Ray	s****y	1
Po-Chuan Hsieh	s**t@s**t	1
Phil Blackwood	p**5@g**m	1
and 15 more...

Issue and Pull Request metadata

Last synced: 2 days ago

Total issues: 107
Total pull requests: 613
Average time to close issues: 7 months
Average time to close pull requests: 8 days
Total issue authors: 70
Total pull request authors: 68
Average comments per issue: 5.16
Average comments per pull request: 0.37
Merged pull request: 483
Bot issues: 2
Bot pull requests: 436

Past year issues: 15
Past year pull requests: 102
Past year average time to close issues: about 1 month
Past year average time to close pull requests: 5 days
Past year issue authors: 13
Past year pull request authors: 42
Past year average comments per issue: 1.73
Past year average comments per pull request: 0.53
Past year merged pull request: 44
Past year bot issues: 0
Past year bot pull requests: 50

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/pypa/pip-audit

Top Issue Authors

woodruffw (25)
tetsuo-cpp (4)
bittner (3)
93578237 (2)
q0w (2)
di (2)
matthewdeanmartin (2)
norg (2)
dependabot[bot] (2)
mgedmin (2)
jenstroeger (2)
hugoalvarado (1)
carl-armis (1)
TansyArron (1)
Zac-HD (1)

Top Pull Request Authors

dependabot[bot] (436)
woodruffw (67)
tetsuo-cpp (10)
gcomneno (5)
mathbou (5)
PreistlyPython (4)
Olexandr88 (4)
tnytown (4)
Copilot (3)
AleksZyro (3)
orsinium (2)
ThunderKey (2)
hseg (2)
PTank (2)
hansu650 (2)

Top Issue Labels

enhancement (36)
component:dep-sources (24)
bug (22)
bug-candidate (13)
help wanted (10)
upstream (9)
good first issue (9)
component:cli (5)
dependencies (5)
component:output-formats (4)
chore (4)
plat:windows (3)
pri:low (3)
component:cicd (3)
duplicate (3)
question (2)
component:docs (2)
github_actions (2)
component:fixes (2)
refactoring (2)
needs-response (2)
performance (2)
plat:macos (1)
wontfix (1)
plat:linux (1)
component:vuln-sources (1)
discussion (1)

Top Pull Request Labels

dependencies (444)
github_actions (272)
python (164)
chore (38)
component:dep-sources (13)
component:cicd (7)
enhancement (6)
component:cli (4)
needs-response (4)
refactoring (3)
component:output-formats (2)
component:docs (2)
bug (2)
wontfix (2)
[deprecated] team/agent-shared-components (1)
changelog/no-changelog (1)
component:tests (1)
plat:windows (1)
component:vuln-sources (1)

Package metadata

Total packages: 4
Total downloads:
- pypi: 26,723,596 last-month
Total docker downloads: 408,395
Total dependent packages: 39 (may contain duplicates)
Total dependent repositories: 115 (may contain duplicates)
Total versions: 129
Total maintainers: 3

pypi.org: pip-audit

A tool for scanning Python environments for known vulnerabilities

Homepage: https://pypi.org/project/pip-audit/
Documentation: https://pip-audit.readthedocs.io/
Licenses: Apache Software License
Latest release: 2.10.1 (published 5 months ago)
Last Synced: 2026-11-07T10:33:23.079Z (2 days ago)
Versions: 63
Dependent Packages: 39
Dependent Repositories: 115
Downloads: 26,723,596 Last month
Docker Downloads: 408,395
Rankings:
- Downloads: 0.538%
- Dependent packages count: 0.759%
- Dependent repos count: 1.384%
- Docker downloads count: 1.56%
- Average: 1.986%
- Stargazers count: 2.139%
- Forks count: 5.539%
Maintainers (2)
- di
- woodruffw

proxy.golang.org: github.com/pypa/pip-audit

Homepage:
Documentation: https://pkg.go.dev/github.com/pypa/pip-audit#section-documentation
Licenses: apache-2.0
Latest release: v2.10.1+incompatible (published 5 months ago)
Last Synced: 2026-11-07T10:56:14.605Z (2 days ago)
Versions: 63
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent packages count: 5.468%
- Average: 5.651%
- Dependent repos count: 5.835%

pkgsrc-netbsd-x86_64-10.1-all: security/py-pip-audit

Scan Python environments for known vulnerabilities

Homepage: https://github.com/pypa/pip-audit
Documentation: https://pkgsrc.se/security/py-pip-audit
Licenses: apache-2.0
Latest release: 2.10.0 (published 8 months ago)
Last Synced: 2026-10-30T21:35:58.148Z (10 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

nixpkgs-unstable: pip-audit

Tool for scanning Python environments for known vulnerabilities

Homepage: https://github.com/pypa/pip-audit
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/by-name/pi/pip-audit/package.nix#L65
Licenses: Apache-2.0
Latest release: 2.10.1 (published 8 days ago)
Last Synced: 2026-11-01T10:39:52.910Z (8 days ago)
Versions: 2
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (1)
- fabaff

Dependencies

.github/workflows/ci.yml actions

actions/checkout v4.1.0 composite
actions/setup-python v4 composite

.github/workflows/docs.yml actions

actions/checkout v4.1.0 composite
actions/deploy-pages 9dbe3824824f8a1377b8e298bafde1a50ede43e5 composite
actions/setup-python d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 composite
actions/upload-pages-artifact a753861a5debcf57bf8b404356158c8e1e33150c composite

.github/workflows/lint.yml actions

actions/checkout v4.1.0 composite
actions/setup-python v4 composite

.github/workflows/release.yml actions

actions/checkout v4.1.0 composite
actions/setup-python v4 composite
pypa/gh-action-pypi-publish release/v1 composite
sigstore/gh-action-sigstore-python v2.0.1 composite

.github/workflows/scorecards.yml actions

actions/checkout v4.1.0 composite
actions/upload-artifact a8a3f3ad30e3422c9c7b888a15615d19a852ae32 composite
github/codeql-action/upload-sarif cdcdbb579706841c47f7063dda365e292e5cad7a composite
ossf/scorecard-action 08b4669551908b1024bb425080c797723083c031 composite

pyproject.toml pypi

CacheControl [filecache] >= 0.13.0
cyclonedx-python-lib ~= 4.0
html5lib >=1.1
packaging >=23.0.0
pip-api >=0.0.28
pip-requirements-parser >=32.0.0
requests >= 2.31.0
rich >=12.4
toml >=0.10

.github/workflows/zizmor.yml actions

actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
zizmorcore/zizmor-action 3dc1ecc9bcb9e94e9b2c709687979e1298497054 composite

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Summary