https://github.com/pyupio/safety

cicd dependency-management devsecops open-source-security package-management python security security-vulnerability travis vulnerability-detection vulnerability-scanners

Score: 26.78345962962709

Last synced: about 21 hours ago
JSON representation

Repository metadata:

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Host: GitHub
URL: https://github.com/pyupio/safety
Owner: pyupio
Created: 2016-10-19T13:22:56.000Z (about 10 years ago)
Default Branch: main
Last Pushed: 2026-11-05T14:52:46.000Z (3 days ago)
Last Synced: 2026-11-06T04:35:31.009Z (2 days ago)
Topics: cicd, dependency-management, devsecops, open-source-security, package-management, python, security, security-vulnerability, travis, vulnerability-detection, vulnerability-scanners
Language: Python
Homepage: https://safetycli.com/product/safety-cli
Size: 3.71 MB
Stars: 2,001
Watchers: 31
Forks: 210
Open Issues: 97
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSES/Apache-2.0.txt
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md

Owner metadata:

Name: Safety Cybersecurity (formerly pyup.io)
Login: pyupio
Email: support@safetycli.com
Kind: organization
Description: End-to-end Python Dependency Security
Website: https://safetycli.com
Location: Canada
Twitter:
Company:
Icon url: https://avatars.githubusercontent.com/u/16113910?v=4
Repositories: 21
Last Synced at: 2026-10-31T17:03:35.836Z
Profile URL: https://github.com/pyupio

GitHub Events

Total

Create event: 163
Delete event: 47
Fork event: 30
Issue comment event: 456
Issues event: 111
Member event: 2
Pull request event: 313
Pull request review comment event: 157
Pull request review event: 307
Push event: 718
Release event: 31
Watch event: 201
Total: 2536

Last Year

Create event: 9
Fork event: 7
Issue comment event: 22
Issues event: 7
Pull request event: 13
Pull request review event: 10
Push event: 26
Watch event: 20
Total: 114

Committers metadata

Last synced: 1 day ago

Total Commits: 707
Total Committers: 57
Avg Commits per committer: 12.404
Development Distribution Score (DDS): 0.662

Commits in past year: 29
Committers in past year: 7
Avg Commits per committer in past year: 4.143
Development Distribution Score (DDS) in past year: 0.586

Name	Email	Commits
Yeison Vargas	y**n@s**m	239
Jannis Gebauer	j**b@m**m	106
Rafael Pivato	r**o@g**m	49
Dylan Pulver	3****r	49
safety-bot	s****t	45
pyup-bot	g**t@p**o	27
Nícholas Kegler	n**s@g**m	27
SafetyQuincyF	q**y@s**m	20
Federico Lorenzi	f**i@g**m	19
Justin Womersley	j**y@g**m	15
jakub-safetycli	j**b@s**m	14
chowmean	g**m@g**m	11
Lesley	l**y@p**o	11
Justin Womersley	j**y@J**l	4
Haseeb Majid	h**1@g**m	4
Chris Steipp	c**p@l**m	3
Bastien Gerard	b**d@c**m	3
Marcus Wermuth	h**o@m**m	3
Marius Gedminas	m**s@g**s	3
Martin Wong	5****3	3
Nicholas Nadeau	n**u@g**m	3
Nikki Pinski	n**i@s**m	3
Pavel Vdovenko	r**e@g**m	3
Peter Dave Hello	h**u@p**g	3
Bart Kroon	k**n@g**m	2
Christian Clauss	c**s@m**m	2
David Lacho	d**o@g**m	2
Tristan Laurillard	3****n	2
erik schluntz	e**z@g**m	2
redshiftzero	j**n@f**s	2
and 27 more...

Issue and Pull Request metadata

Last synced: 1 day ago

Total issues: 174
Total pull requests: 526
Average time to close issues: almost 2 years
Average time to close pull requests: 3 months
Total issue authors: 124
Total pull request authors: 79
Average comments per issue: 2.33
Average comments per pull request: 1.37
Merged pull request: 336
Bot issues: 1
Bot pull requests: 1

Past year issues: 17
Past year pull requests: 56
Past year average time to close issues: 24 days
Past year average time to close pull requests: about 2 months
Past year issue authors: 14
Past year pull request authors: 38
Past year average comments per issue: 2.12
Past year average comments per pull request: 1.48
Past year merged pull request: 5
Past year bot issues: 1
Past year bot pull requests: 1

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/pyupio/safety

Top Issue Authors

andy-maier (17)
dylanpulver (10)
jayfk (6)
mcandre (4)
pawamoy (3)
washeck (3)
Zeckie (3)
bac (2)
bartekgruszka (2)
DLS29 (2)
dugdug36 (2)
carlosdorneles-mb (2)
hangonlyra (2)
csipapicsa (2)
pzelnip (2)

Top Pull Request Authors

yeisonvargasf (195)
dylanpulver (113)
SafetyQuincyF (46)
jakub-safetycli (26)
jeff-at-tamer-dot-codes (12)
mwermuth (7)
raywcm (7)
PreistlyPython (5)
Mighty303 (4)
davidlacho (4)
cclauss (4)
oz123 (3)
DLS29 (3)
dotlambda (3)
mayank0030 (2)

Top Issue Labels

enhancement (28)
bug (24)
considering (19)
question (7)
good first issue (3)
invalid (1)
Wiz-remediation (1)

Top Pull Request Labels

enhancement (107)
bug (80)
documentation (4)
Low (2)
dependencies (2)
team-confirmations-system (1)
python (1)
considering (1)

Package metadata

Total packages: 21
Total downloads:
- pypi: 3,219,090 last-month
- homebrew: 40 last-month
Total docker downloads: 359,985
Total dependent packages: 132 (may contain duplicates)
Total dependent repositories: 3,545 (may contain duplicates)
Total versions: 290
Total maintainers: 5
Total advisories: 1

nixpkgs-23.05: safety-cli

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/python-modules/safety/default.nix#L74
Licenses: MIT
Latest release: 2.3.5 (published 10 months ago)
Last Synced: 2026-08-15T10:34:39.985Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 1.191%
- Stargazers count: 2.243%
- Forks count: 2.521%
Maintainers (2)
- dotlambda
- thomasdesr

pypi.org: safety

Scan dependencies for known vulnerabilities and licenses.

Homepage:
Documentation: https://safety.readthedocs.io/
Licenses: MIT
Latest release: 3.8.1 (published 5 months ago)
Last Synced: 2026-11-07T17:20:29.237Z (about 22 hours ago)
Versions: 118
Dependent Packages: 132
Dependent Repositories: 3,535
Downloads: 3,219,090 Last month
Docker Downloads: 359,985
Rankings:
- Dependent repos count: 0.174%
- Dependent packages count: 0.179%
- Downloads: 0.317%
- Docker downloads count: 0.729%
- Average: 1.216%
- Stargazers count: 1.725%
- Forks count: 4.172%
Maintainers (3)
Advisories:
- Malicious package may avoid detection in python auditing

proxy.golang.org: github.com/pyupio/safety

Homepage:
Status: removed
Documentation: https://pkg.go.dev/github.com/pyupio/safety#section-documentation
Licenses:
Latest release: v0.0.0-20260902214841-997602736a20 (published 2 months ago)
Last Synced: 2026-11-07T00:30:02.779Z (1 day ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent packages count: 4.373%
- Average: 4.52%
- Dependent repos count: 4.668%

github actions: pyupio/safety

Runs the Safety CLI dependency scanner against your project

Homepage: https://safetycli.com/product/safety-cli
Licenses:
Latest release: 3.12.13 (published almost 2 years ago)
Last Synced: 2026-11-06T07:45:03.050Z (2 days ago)
Versions: 121
Dependent Packages: 0
Dependent Repositories: 3
Rankings:
- Dependent packages count: 0.0%
- Stargazers count: 0.133%
- Forks count: 0.412%
- Average: 4.655%
- Dependent repos count: 18.073%

conda-forge.org: safety

Homepage: https://pyup.io/safety
Licenses: MIT
Latest release: 2.3.1 (published about 4 years ago)
Last Synced: 2026-08-18T10:28:07.842Z (3 months ago)
Versions: 13
Dependent Packages: 0
Dependent Repositories: 7
Rankings:
- Stargazers count: 10.437%
- Dependent repos count: 12.838%
- Forks count: 16.162%
- Average: 22.744%
- Dependent packages count: 51.54%

formulae.brew.sh: safety

Checks Python dependencies for known vulnerabilities and suggests remediations

Homepage: https://safetycli.com/product/safety-cli
Licenses: MIT
Latest release: 3.8.1 (published 5 months ago)
Last Synced: 2026-11-07T00:30:01.192Z (1 day ago)
Versions: 18
Dependent Packages: 0
Dependent Repositories: 0
Downloads: 40 Last month
Rankings:
- Dependent packages count: 18.762%
- Average: 46.93%
- Dependent repos count: 54.243%
- Downloads: 67.785%

nixpkgs-unstable: python313Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/safety/default.nix#L85
Licenses: MIT
Latest release: 3.8.1 (published 7 days ago)
Last Synced: 2026-11-01T11:11:53.306Z (7 days ago)
Versions: 2
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-23.11: python311Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/python-modules/safety/default.nix#L74
Licenses: MIT
Latest release: 2.3.5 (published 9 months ago)
Last Synced: 2026-08-18T10:27:25.010Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-23.05: python310Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/python-modules/safety/default.nix#L74
Licenses: MIT
Latest release: 2.3.5 (published 10 months ago)
Last Synced: 2026-08-18T10:28:01.180Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-24.05: safety-cli

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/safety/default.nix#L102
Licenses: MIT
Latest release: 3.2.0 (published 9 months ago)
Last Synced: 2026-08-18T10:27:19.750Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-24.11: python311Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/safety/default.nix#L103
Licenses: MIT
Latest release: 3.2.9 (published 9 months ago)
Last Synced: 2026-08-05T21:04:51.659Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-24.11: safety-cli

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/safety/default.nix#L103
Licenses: MIT
Latest release: 3.2.9 (published 9 months ago)
Last Synced: 2026-03-06T17:27:22.268Z (8 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-unstable: python314Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/safety/default.nix#L85
Licenses: MIT
Latest release: 3.8.1 (published 7 days ago)
Last Synced: 2026-11-01T11:46:08.694Z (7 days ago)
Versions: 2
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-24.11: python312Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/safety/default.nix#L103
Licenses: MIT
Latest release: 3.2.9 (published 9 months ago)
Last Synced: 2026-08-18T10:27:15.223Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-23.11: safety-cli

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/python-modules/safety/default.nix#L74
Licenses: MIT
Latest release: 2.3.5 (published 9 months ago)
Last Synced: 2026-08-18T10:27:23.051Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-24.05: python311Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/safety/default.nix#L102
Licenses: MIT
Latest release: 3.2.0 (published 9 months ago)
Last Synced: 2026-08-18T10:27:38.813Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

guix: python-safety

Check installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/python-xyz.scm#n31103
Licenses: expat
Latest release: 3.6.2 (published 8 months ago)
Last Synced: 2026-08-18T10:30:10.998Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

nixpkgs-unstable: safety-cli

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/safety/default.nix#L85
Licenses: MIT
Latest release: 3.8.1 (published 7 days ago)
Last Synced: 2026-11-01T12:34:01.464Z (7 days ago)
Versions: 2
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-23.11: python310Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/python-modules/safety/default.nix#L74
Licenses: MIT
Latest release: 2.3.5 (published 9 months ago)
Last Synced: 2026-08-18T10:27:23.408Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-23.05: python311Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/python-modules/safety/default.nix#L74
Licenses: MIT
Latest release: 2.3.5 (published 10 months ago)
Last Synced: 2026-08-18T10:28:02.549Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

nixpkgs-24.05: python312Packages.safety

Checks installed dependencies for known vulnerabilities

Homepage: https://github.com/pyupio/safety
Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/safety/default.nix#L102
Licenses: MIT
Latest release: 3.2.0 (published 9 months ago)
Last Synced: 2026-07-24T19:46:04.279Z (4 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Maintainers (2)
- dotlambda
- thomasdesr

Dependencies

.github/workflows/build.yml actions

actions/checkout v2 composite

action.yml actions

docker://pyupio/safety-v2-beta latest docker

Dockerfile docker

python 3.10-slim build

tests/action/docker-insecure/Dockerfile docker

python 3.10-slim build

tests/action/docker-secure/Dockerfile docker

python 3.10-slim build

pyproject.toml pypi

.github/workflows/bump.yml actions

actions/checkout v4 composite
actions/setup-python v5 composite
crazy-max/ghaction-import-gpg v6 composite

.github/workflows/cd.yml actions

actions/checkout v4 composite
actions/download-artifact v4 composite
pypa/gh-action-pypi-publish release/v1 composite
softprops/action-gh-release v2.0.1 composite

.github/workflows/ci.yml actions

actions/checkout v4 composite
actions/setup-python v5 composite

.github/workflows/issue_responder.yml actions

actions/checkout v3 composite

.github/workflows/pr-comment.yml actions

actions/github-script v7 composite

.github/workflows/pr.yml actions

.github/workflows/reusable-build.yml actions

actions/checkout v4 composite
actions/download-artifact v4 composite
actions/setup-python v5 composite
actions/upload-artifact v4 composite
azure/login v2 composite
azure/trusted-signing-action v0.5 composite
sigstore/cosign-installer v4.0.0 composite

.devcontainer/Dockerfile docker

python 3.8-alpine build

tests/reqs/requirements.txt pypi

secure-package ==1.0.0 test