Is aiohttp safe to use?

aiohttp has no known vulnerabilities on the latest version (3.14.3). DepScope rates its health at 68/100 (moderate risk).

What is the latest version of aiohttp?

The latest version of aiohttp is 3.14.3, released 2026-07-23.

Does aiohttp have known vulnerabilities?

No known vulnerabilities on the latest version of aiohttp.

Is aiohttp deprecated?

No, aiohttp is actively maintained. Latest release: 3.14.3 (2026-07-23).

What are alternatives to aiohttp?

Popular alternatives to aiohttp in PyPI include: urllib3, cryptography, cffi, click, pydantic-core.

What license does aiohttp use?

aiohttp is licensed under Apache-2.0 AND MIT.

aiohttp

pypiv3.14.3

Async http client/server framework (asyncio)

License Apache-2.0 AND MITpermissive312 versions13 deps

aio-libs/aiohttp

/ 100

Health

use with caution

[email protected] low health (68/100) — consider alternatives

Moderate health score (68/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

8/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

6.7/10

moderate

Maintainer trust

Active maintainers (3m)

21

Contributors (12m)

21

Primary author dominance

47%

GitHub stars

16,420

Quality signals

OSS Criticality

0.78critical

Download trend

rapid decline(-64.4%)

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (13)

aiohappyeyeballs aiosignal async-timeout attrs frozenlist multidict propcache typing_extensions yarl aiodns Brotli brotlicffi backports.zstd;

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/aiohttp