{"package":"azure-identity","ecosystem":"pypi","latest_version":"1.25.3","description":"Microsoft Azure Identity Library for Python","license":"","license_risk":"unknown","commercial_use_notes":"No license declared in registry metadata — verify manually before commercial use.","homepage":"https://pypi.org/project/azure-identity/","repository":"","downloads_weekly":0,"health":{"score":53,"risk":"high","breakdown":{"maintenance":15,"popularity":0,"security":23,"maturity":15,"community":0},"deprecated":false,"max_score":100},"vulnerabilities":{"count":1,"critical":0,"high":0,"medium":1,"low":0,"details":[{"vuln_id":"CVE-2024-35255","severity":"medium","summary":"Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability","affected_versions":"<1.16.1|<4.2.1|<1.12.2|>=2.7.0,<2.9.2|>=4.49.1,<4.60.4|<1.6.0-beta.4.0.20240610221955-50774cd97099|>=1.14.4-beta,<1.15.1|<1.11.4|>=4.61.0,<4.61.3|=1.0.0|=1.0.0b1|=1.0.0b2|=1.0.0b3|=1.0.0b4|=1.0.1|=1.1.0|=1.10.0|=1.10.0b1|=1.11.0|=1.11.0b1|=1.11.0b2|=1.11.0b3|=1.12.0|=1.12.0b1|=1.12.0b2|=1.13.0|=1.13.0b1|=1.13.0b2|=1.13.0b3|=1.13.0b4|=1.14.0|=1.14.0b1|=1.14.0b2|=1.14.1|=1.15.0|=1.15.0b1|=1.15.0b2|=1.16.0|=1.16.0b1|=1.16.0b2|=1.2.0|=1.3.0|=1.3.1|=1.4.0|=1.4.0b1|=1.4.0b2|=1.4.0b3|=1.4.0b4|=1.4.0b5|=1.4.0b6|=1.4.0b7|=1.4.1|=1.5.0|=1.5.0b1|=1.5.0b2|=1.6.0|=1.6.0b1|=1.6.0b2|=1.6.0b3|=1.6.1|=1.7.0|=1.7.0b1|=1.7.0b2|=1.7.0b3|=1.7.0b4|=1.7.1|=1.8.0|=1.8.0b1|=1.9.0|=1.9.0b1|=1.0.0|=1.0.0-preview.1|=1.0.0-preview.2|=1.0.0-preview.3|=1.0.0-preview.4|=1.0.0-preview.5|=1.0.1|=1.0.2|=1.0.3|=1.0.4|=1.0.5|=1.0.6|=1.0.7|=1.0.8|=1.0.9|=1.1.0|=1.1.0-beta.1|=1.1.0-beta.2|=1.1.0-beta.3|=1.1.0-beta.4|=1.1.0-beta.5|=1.1.0-beta.6|=1.1.0-beta.7|=1.1.1|=1.1.2|=1.1.3|=1.10.0|=1.10.0-beta.1|=1.10.1|=1.10.2|=1.10.3|=1.10.4|=1.11.0|=1.11.0-beta.1|=1.11.0-beta.2|=1.11.1|=1.11.2|=1.11.3|=1.11.4|=1.12.0|=1.12.0-beta.1|=1.12.1|=1.2.0|=1.2.0-beta.1|=1.2.0-beta.2|=1.2.1|=1.2.2|=1.2.3|=1.2.4|=1.2.5|=1.3.0|=1.3.0-beta.1|=1.3.0-beta.2|=1.3.1|=1.3.2|=1.3.3|=1.3.4|=1.3.5|=1.3.6|=1.3.7|=1.4.0|=1.4.0-beta.1|=1.4.1|=1.4.2|=1.4.3|=1.4.4|=1.4.5|=1.4.6|=1.5.0|=1.5.0-beta.1|=1.5.0-beta.2|=1.5.1|=1.5.2|=1.5.3|=1.5.4|=1.5.5|=1.6.0|=1.6.0-beta.1|=1.6.1|=1.7.0|=1.7.0-beta.1|=1.7.0-beta.2|=1.7.1|=1.7.2|=1.7.3|=1.8.0|=1.8.0-beta.1|=1.8.1|=1.8.2|=1.8.3|=1.9.0|=1.9.0-beta.1|=1.9.0-beta.2|=1.9.0-beta.3|=1.9.1|=1.9.2|=4.49.1|=4.50.0|=4.51.0|=4.52.0|=4.53.0|=4.54.0|=4.54.1|=4.55.0|=4.55.0-TestPackage|=4.56.0|=4.57.0|=4.58.0|=4.58.1|=4.59.0|=4.59.1|=4.60.0|=4.60.0-netonly|=4.60.1|=4.60.2|=4.60.3|=1.14.4-beta|=1.15.0|=1.0.0|=1.1.0|=1.1.1|=1.10.0|=1.10.1|=1.10.2|=1.10.3|=1.10.4|=1.11.0|=1.11.1|=1.11.2|=1.11.3|=1.2.0|=1.2.1|=1.2.2|=1.2.3|=1.3.0|=1.4.0|=1.4.1|=1.5.0|=1.6.0|=1.6.1|=1.7.0|=1.8.0|=1.8.1|=1.8.2|=1.9.0|=4.61.0|=4.61.1|=4.61.2","fixed_version":"4.61.3","source":"osv","published_at":"2024-06-11T18:30:50Z","in_kev":false,"epss_prob":0.00788,"epss_percentile":0.52035,"threat_tier":"theoretical"}],"actively_exploited_count":0,"likely_exploited_count":0},"versions":{"latest":"1.25.3","total_count":83,"recent":["1.17.0b2","1.17.0","1.17.1","1.18.0b1","1.18.0b2","1.18.0","1.19.0","1.20.0","1.21.0","1.22.0","1.23.0","1.23.1","1.24.0b1","1.24.0","1.25.0","1.25.1","1.25.2","1.25.3","1.26.0b1","1.26.0b2"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":0,"first_published":null,"last_published":"2026-03-13T01:12:22.951763Z","dependencies_count":5,"dependencies":["azure-core>=1.31.0","cryptography>=2.5","msal>=1.35.1","msal-extensions>=1.2.0","typing-extensions>=4.0.0"]},"github_stats":null,"bundle":null,"typescript":null,"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"use_with_caution","issues":["Moderate health score (53/100) — verify manually"],"use_version":"1.25.3","version_hint":"Update to >= 4.61.3 to fix known vulnerabilities","summary":"azure-identity@1.25.3 low health (53/100) — consider alternatives"},"version_scoped":null,"_meta":{"endpoint":"check","tier":"full","philosophy":"DepScope is free. Use the cheapest endpoint that answers your real question.","cheaper_alternatives":[{"endpoint":"/api/exists/pypi/azure-identity","tokens_estimated":12,"use_when":"you only need to know if the package exists (hallucination guard)"},{"endpoint":"/api/health/pypi/azure-identity","tokens_estimated":80,"use_when":"you only need a 0-100 score for go/no-go (>=70 = safe)"},{"endpoint":"/api/prompt/pypi/azure-identity","tokens_estimated":280,"use_when":"you want a plain-text LLM-friendly brief instead of JSON"},{"endpoint":"POST /api/check_bulk","tokens_estimated":60,"use_when":"you have 5+ packages to check; sends one round-trip instead of N"}],"docs":"https://depscope.dev/integrate","hint_bulk":"You've called /api/check 84 times in 60s. Save bandwidth + tokens with POST /api/check_bulk (1 round-trip for N pkgs)."},"requested_version":null,"_cache":"hit","_response_ms":0,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":true,"criticality_score":0.502,"criticality_tier":"high","velocity_pct":1.2,"velocity_trend":"stable","publish_security":"api_token"},"co_used_with":[{"package":"aws-cdk.aws-ecr","occurrences":8},{"package":"ua-parser-rs","occurrences":8}],"version_history_summary":{"total_versions":20,"first_release_age_days":2575,"last_release_days_ago":125,"avg_days_between_releases":136,"release_velocity":"moderate"}}