Is github.com/prometheus/prometheus safe to use?

github.com/prometheus/prometheus has 2 known vulnerabilities on the latest version (v0.314.0). DepScope rates its health at 88/100 (low risk).

What is the latest version of github.com/prometheus/prometheus?

The latest version of github.com/prometheus/prometheus is v0.314.0, released 2026-08-17.

Does github.com/prometheus/prometheus have known vulnerabilities?

Yes. github.com/prometheus/prometheus has 2 known vulnerabilities. See depscope.dev/pkg/go/github.com/prometheus/prometheus for details.

Is github.com/prometheus/prometheus deprecated?

No, github.com/prometheus/prometheus is actively maintained. Latest release: v0.314.0 (2026-08-17).

What are alternatives to github.com/prometheus/prometheus?

DepScope has no curated alternatives for github.com/prometheus/prometheus at this time.

What license does github.com/prometheus/prometheus use?

github.com/prometheus/prometheus is licensed under Apache-2.0.

github.com/prometheus/prometheus

govv0.314.0

The Prometheus monitoring system and time series database.

License Apache-2.0permissive212 versions1459 maintainers0 deps65,770 weekly dl

prometheus/prometheus

/ 100

Health

safe to use

github.com/prometheus/[email protected] is safe to use (health: 88/100)

Update to >= 0.311.2-0.20260410083055-07c6232d159b to fix known vulnerabilities

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

23/25

security

15/15

maturity

15/15

community

Vulnerabilities

1 medium1 low

Advisories (2)

Severity	ID	Summary	Fixed in
medium	BIT-prometheus-2026-40179	Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer	0.311.2-0.20260410083055-07c6232d159b
unknown	BIT-prometheus-2026-40179	Prometheus has Stored XSS via metric names and label values in Prometheus web UI in github.com/prometheus/prometheus	0.311.2-0.20260410083055-07c6232d159b

Maintainer trust

Active maintainers (3m)

21

Contributors (12m)

21

Primary author dominance

54%

GitHub stars

63,780

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/prometheus/prometheus

Last updated · 2026-08-17T13:38:44Z

github.com/prometheus/prometheus

govv0.314.0

The Prometheus monitoring system and time series database.

License Apache-2.0permissive212 versions1459 maintainers0 deps65,770 weekly dl

prometheus/prometheus

/ 100

Health

safe to use

github.com/prometheus/[email protected] is safe to use (health: 88/100)

Update to >= 0.311.2-0.20260410083055-07c6232d159b to fix known vulnerabilities

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

23/25

security

15/15

maturity

15/15

community

Vulnerabilities

1 medium1 low

Advisories (2)

Severity	ID	Summary	Fixed in
medium	BIT-prometheus-2026-40179	Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer	0.311.2-0.20260410083055-07c6232d159b
unknown	BIT-prometheus-2026-40179	Prometheus has Stored XSS via metric names and label values in Prometheus web UI in github.com/prometheus/prometheus	0.311.2-0.20260410083055-07c6232d159b

Maintainer trust

Active maintainers (3m)

21

Contributors (12m)

21

Primary author dominance

54%

GitHub stars

63,780

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/prometheus/prometheus

Last updated · 2026-08-17T13:38:44Z