Is anchore-syft safe to use?

anchore-syft has no known vulnerabilities on the latest version (1.18.1). DepScope rates its health at 39/100 (critical risk).

What is the latest version of anchore-syft?

The latest version of anchore-syft is 1.18.1, released 2025-01-07.

Does anchore-syft have known vulnerabilities?

No known vulnerabilities on the latest version of anchore-syft.

Is anchore-syft deprecated?

No, anchore-syft is actively maintained. Latest release: 1.18.1 (2025-01-07).

What are alternatives to anchore-syft?

Popular alternatives to anchore-syft in PyPI include: boto3, packaging, urllib3, idna, requests.

What license does anchore-syft use?

anchore-syft is licensed under Apache-2.0.

anchore-syft

pypiv1.18.1

CLI tool for generating a Software Bill of Materials from container images and filesystems

License Apache-2.0permissive5 versions0 deps3,254 weekly dl

/ 100

Health

use with caution

[email protected] low health (39/100) — consider alternatives

Moderate health score (39/100) — verify manually

Health breakdown0 – 100

5/25

maintenance

6/20

popularity

25/25

security

3/15

maturity

0/15

community

Vulnerabilities

none known

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/anchore-syft