Is ragas safe to use?

ragas has 1 known vulnerabilities on the latest version (0.4.3). DepScope rates its health at 57/100 (high risk).

What is the latest version of ragas?

The latest version of ragas is 0.4.3, released 2026-01-14.

Yes. ragas has 1 known vulnerabilities. See depscope.dev/pkg/conda/ragas for details.

No, ragas is actively maintained. Latest release: 0.4.3 (2026-01-14).

DepScope has no curated alternatives for ragas at this time.

ragas is licensed under Apache-2.0.

condav0.4.3

Evaluation framework for your Retrieval Augmented Generation (RAG) pipelines

License Apache-2.0permissive44 versions1 maintainers0 deps442 weekly dl

/ 100

Health

safe to use

[email protected] is safe to use (health: 57/100)

Health breakdown0 – 100

15/25

maintenance

3/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

1 low

Advisories (1)

Severity	ID	Summary	Fixed in
low	CVE-2026-6587	RAGAS has SSRF via Multi-Modal Faithfulness Collections Module	—

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/conda/ragas

First published · 2024-05-08 16:35:54.263000+00:00

Last updated · 2026-01-14 05:50:45.459000+00:00