xz has no known vulnerabilities on the latest version (5.8.3). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of xz?

The latest version of xz is 5.8.3, released 2026-04-01.

Does xz have known vulnerabilities?

No known vulnerabilities on the latest version of xz.

No, xz is actively maintained. Latest release: 5.8.3 (2026-04-01).

What are alternatives to xz?

DepScope has no curated alternatives for xz at this time.

What license does xz use?

xz is licensed under 0BSD AND GPL-2.0-or-later.

xz

homebrewv5.8.3

General-purpose data compression with high compression ratio

License 0BSD AND GPL-2.0-or-laterpermissive1 versions1 maintainers0 deps78,507 weekly dl

/ 100

Health

do not use

xz: version matches a known historical supply-chain compromise. DO NOT install.

Check /api/versions for a safe release

Historical compromise KB matches current version (1 incident(s))

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/homebrew/xz

Last updated · 2026-04-01T03:46:37Z

xz