Is huggingface_hub safe to use?

huggingface_hub has no known vulnerabilities on the latest version (1.17.0). DepScope rates its health at 73/100 (moderate risk).

What is the latest version of huggingface_hub?

The latest version of huggingface_hub is 1.17.0, released 2026-05-28.

Does huggingface_hub have known vulnerabilities?

No known vulnerabilities on the latest version of huggingface_hub.

Is huggingface_hub deprecated?

No, huggingface_hub is actively maintained. Latest release: 1.17.0 (2026-05-28).

What are alternatives to huggingface_hub?

Popular alternatives to huggingface_hub in PyPI include: boto3, packaging, urllib3, certifi, requests.

What license does huggingface_hub use?

huggingface_hub is licensed under Apache-2.0.

huggingface_hub

pypiv1.17.0

Client library to download and publish models, datasets and other repos on the huggingface.co hub

License Apache-2.0permissive284 versions1 maintainers113 deps

huggingface/huggingface_hub

/ 100

Health

safe to use

[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

8/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

5.9/10

moderate

Maintainer trust

Active maintainers (3m)

22

Contributors (12m)

22

Primary author dominance

44%

GitHub stars

3,540

Quality signals

OSS Criticality

0.51high

Download trend

growing(+10.3%)

Publish security

API token

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/huggingface_hub

huggingface_hub

pypiv1.17.0

Client library to download and publish models, datasets and other repos on the huggingface.co hub

License Apache-2.0permissive284 versions1 maintainers113 deps

huggingface/huggingface_hub

/ 100

Health

safe to use

[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

8/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

5.9/10

moderate

Maintainer trust

Active maintainers (3m)

22

Contributors (12m)

22

Primary author dominance

44%

GitHub stars

3,540

Quality signals

OSS Criticality

0.51high

Download trend

growing(+10.3%)

Publish security

API token

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/huggingface_hub