Is bandit safe to use?

bandit has no known vulnerabilities on the latest version (1.9.4). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of bandit?

The latest version of bandit is 1.9.4, released 2026-02-25.

Does bandit have known vulnerabilities?

No known vulnerabilities on the latest version of bandit.

Is bandit deprecated?

No, bandit is actively maintained. Latest release: 1.9.4 (2026-02-25).

What are alternatives to bandit?

Popular alternatives to bandit in PyPI include: urllib3, pyyaml, pydantic-core, pydantic_core, protobuf.

What license does bandit use?

bandit is licensed under Apache-2.0.

bandit

pypiv1.9.4

Security oriented static analyser for python code.

License Apache-2.0permissive50 versions1 maintainers17 deps5,464,586 weekly dl

/ 100

Health

use with caution

[email protected] low health (66/100) — consider alternatives

Moderate health score (66/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Quality signals

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (17)

PyYAML stevedore rich colorama PyYAML;tomli GitPython sarif-om jschema-to-python coverage fixtures flake8 stestr testscenarios testtools beautifulsoup4 pylint

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/bandit