View safety-db on Snyk Open Source Advisor

Package Health Score

57 / 100

security
No known security issues
popularity
Small
maintenance
Inactive
community
Sustainable

Explore Similar Packages

Popularity

Small

GitHub Stars: 763
Forks: 84
Contributors: 20

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package safety-db, we found that it has been starred 763 times.

Security

No known security issues

Security and license risk for latest version

Release Date: Jul 18, 2021
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
0
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

Attribution-NonCommercial-ShareAlike 4.0 International

Security Policy

We found a way for you to contribute to the project! Looks like safety-db is missing a security policy.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Inactive

Commit Frequency

Open Issues: 11
Open PR: 4
Last Release: 3 years ago
Last Commit: 29 days ago

Further analysis of the maintenance status of safety-db based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for safety-db is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Sustainable

Readme: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 20
Funding: No

With more than 10 contributors for the safety-db repository, this is possibly a sign for a growing and inviting community.

We found a way for you to contribute to the project! Looks like safety-db is missing a Code of Conduct.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: ==2.7.*, ==3.4.*, ==3.5.*, ==3.6.*

Age: 8 years
Latest Release: 3 years ago
Dependencies: N/A
Versions: 4
Maintainers: 3
Wheels: OS Independent

Readme

What is Safety DB?

Safety DB is a database of known security vulnerabilities in Python packages. The data is made available by pyup.io and synced with this repository once per month. Most of the entries are found by filtering CVEs and changelogs for certain keywords and then manually reviewing them.

Tools

Safety CI is a deep GitHub integration that's available on pyup.io. It checks your commits and Pull Requests.
Safety is a command line tool that checks virtualenvironments and requirement files either locally or on a CI server.
Safety Django is a package for Django that warns you in the admin area if your installed Django release is insecure.
Safety Bar (alpha) is a macOS menubar application.
A pre-commit hook by Lucas Cimon.
pipenv check relies on safety and Safety-DB to check for known vulnerabilities in locked components
your tool?

Installation


pip install safety-db

Usage


from safety_db import INSECURE, INSECURE_FULL

What is this not?

This is not a hall of shame, or a list of packages to avoid. The package maintainers show a great responsibility by documenting and fixing security issues in such a way that they can be listed here. That's extremely valuable when considering using a package in production.

Using this data

For humans:

There's a small website available that lets you browse the data: https://pyupio.github.io/safety-db/

For robots:

Check out the data directory:

insecure.json contains just the package name and all insecure releases as a plain list.
insecure_full.json additionally contains the CVE description and URLs, or the relevant part of the changelog.

The database is licensed under CC BY-NC-SA 4.0. This allows you to use the data in any non commercial project as long as you link back to this repo. If you need a license for a commercial project, please contact support@pyup.io.

FAQs

What is safety-db?

A curated database of insecure Python packages. Visit Snyk Advisor to see a full health score report for safety-db, including popularity, security, maintenance & community analysis.

Is safety-db popular?

The python package safety-db receives a total of 501 weekly downloads. As such, safety-db popularity was classified as small. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is safety-db well maintained?

We found indications that safety-db is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is safety-db safe to use?

The python package safety-db was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 29 November-2024, at 05:39 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

safety-db

A curated database of insecure Python packages For more information about how to use this package see README

Ensure you're using the healthiest python packages

Package Health Score

Explore Similar Packages

Popularity

Direct Usage Popularity

Security

Security and license risk for latest version

Maintenance

Commit Frequency

Community

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Package

Readme

What is Safety DB?

Tools

Installation

Usage

What is this not?

Using this data

FAQs

What is safety-db?

Is safety-db popular?

Is safety-db well maintained?

Is safety-db safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Explore Similar Packages

Direct Usage Popularity

Security and license risk for latest version

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Readme

What is Safety DB?

Tools

Installation

Usage

What is this not?

Using this data

FAQs

What is safety-db?

Is safety-db popular?

Is safety-db well maintained?

Is safety-db safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues