Is bcrypt safe to use?

bcrypt has no known vulnerabilities on the latest version (5.0.0). DepScope rates its health at 67/100 (moderate risk).

What is the latest version of bcrypt?

The latest version of bcrypt is 5.0.0, released 2025-09-25.

No known vulnerabilities on the latest version of bcrypt.

No, bcrypt is actively maintained. Latest release: 5.0.0 (2025-09-25).

Popular alternatives to bcrypt in PyPI include: boto3, packaging, urllib3, requests, idna.

bcrypt is licensed under Apache-2.0.

pypiv5.0.0

Modern password hashing for your software and your servers

License Apache-2.0permissive28 versions2 deps45,152,085 weekly dl

/ 100

Health

use with caution

[email protected] low health (67/100) — consider alternatives

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

12/15

maturity

0/15

community

0/15

popularity_floor

Vulnerabilities

Quality signals

OSS Criticality

0.50high

Download trend

stable(+5.4%)

Publish security

API token

Dependencies (2)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/bcrypt