{"package":"imgtool","ecosystem":"pypi","latest_version":"2.4.0","description":"MCUboot's image signing and key management","license":"Apache Software License","license_risk":"unknown","commercial_use_notes":"verify manually — license not parseable / not declared.","homepage":"http://github.com/mcu-tools/mcuboot","repository":"http://github.com/mcu-tools/mcuboot","downloads_weekly":0,"health":{"score":64,"risk":"moderate","breakdown":{"maintenance":25,"popularity":0,"security":25,"maturity":12,"community":2},"deprecated":false,"max_score":100},"vulnerabilities":{"count":0,"critical":0,"high":0,"medium":0,"low":0,"details":[]},"versions":{"latest":"2.4.0","total_count":46,"recent":["1.8.0a1","1.8.0rc1","1.8.0rc2","1.8.0","1.9.0rc1","1.9.0rc2","1.9.0","1.10.0rc1","1.10.0","2.0.0rc1","2.0.0","2.1.0rc1","2.1.0","2.2.0rc1","2.2.0rc2","2.2.0","2.3.0rc1","2.3.0rc2","2.3.0","2.4.0"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":1,"first_published":null,"last_published":"2026-04-09T16:56:22.640357Z","dependencies_count":5,"dependencies":["cbor2","click","cryptography>=40.0.0","intelhex>=2.2.1","pyyaml"]},"github_stats":null,"bundle":null,"typescript":null,"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"safe_to_use","issues":[],"use_version":"2.4.0","version_hint":null,"summary":"imgtool@2.4.0 is safe to use (health: 64/100)"},"version_scoped":null,"requested_version":null,"_cache":"miss","_response_ms":825,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false},"version_history_summary":{"total_versions":20,"first_release_age_days":2686,"last_release_days_ago":20,"avg_days_between_releases":141,"release_velocity":"active"}}