Is py-xgboost safe to use?

py-xgboost has no known vulnerabilities on the latest version (3.2.0). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of py-xgboost?

The latest version of py-xgboost is 3.2.0, released 2026-02-26.

Does py-xgboost have known vulnerabilities?

No known vulnerabilities on the latest version of py-xgboost.

Is py-xgboost deprecated?

No, py-xgboost is actively maintained. Latest release: 3.2.0 (2026-02-26).

What are alternatives to py-xgboost?

DepScope has no curated alternatives for py-xgboost at this time.

What license does py-xgboost use?

py-xgboost is licensed under Apache-2.0.

py-xgboost

condav3.2.0

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library, for Python, R, Java, Scala, C++ and more. Runs on single machine, Hadoop, Spark, Flink and DataFlow

License Apache-2.0permissive36 versions1 maintainers0 deps40,211 weekly dl

dmlc/xgboost/

/ 100

Health

safe to use

[email protected] is safe to use (health: 69/100)

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

6.3/10

moderate

Maintainer trust

Active maintainers (3m)

19

Contributors (12m)

19

Primary author dominance

44%

GitHub stars

28,321

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/conda/py-xgboost

First published · 2020-07-02 21:36:33.503000+00:00

Last updated · 2026-02-26 21:40:16.038000+00:00