Is arrow safe to use?

arrow has no known vulnerabilities on the latest version (1.4.0). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of arrow?

The latest version of arrow is 1.4.0, released 2025-10-18.

Does arrow have known vulnerabilities?

No known vulnerabilities on the latest version of arrow.

No, arrow is actively maintained. Latest release: 1.4.0 (2025-10-18).

What are alternatives to arrow?

Popular alternatives to arrow in PyPI include: python-dateutil, cffi, click, fsspec, h11.

What license does arrow use?

arrow is licensed under Apache-2.0.

arrow

pypiv1.4.0

Better dates & times for Python

License Apache-2.0permissive65 versions15 deps

arrow-py/arrow

/ 100

Health

use with caution

[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

4.7/10

weak

Maintainer trust

Active maintainers (3m)

2

Contributors (12m)

8

Primary author dominance

32%

GitHub stars

9,037

recent ownership change suspected

Quality signals

Download trend

stable(0%)

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (15)

python-dateutil backports.zoneinfo tzdata;doc8;sphinx sphinx-autobuild;sphinx-autodoc-typehints;sphinx_rtd_theme dateparser pre-commit;pytest;pytest-cov;pytest-mock;pytz simplejson

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/arrow