Is importlib_resources safe to use?

importlib_resources has no known vulnerabilities on the latest version (7.1.0). DepScope rates its health at 56/100 (high risk).

What is the latest version of importlib_resources?

The latest version of importlib_resources is 7.1.0, released 2026-04-12.

Does importlib_resources have known vulnerabilities?

No known vulnerabilities on the latest version of importlib_resources.

Is importlib_resources deprecated?

No, importlib_resources is actively maintained. Latest release: 7.1.0 (2026-04-12).

What are alternatives to importlib_resources?

Popular alternatives to importlib_resources in PyPI include: python-dateutil, cffi, click, fsspec, h11.

What license does importlib_resources use?

importlib_resources is licensed under Apache-2.0.

importlib_resources

pypiv7.1.0

Read resources from Python packages

License Apache-2.0permissive83 versions15 deps

python/importlib_resources

/ 100

Health

use with caution

[email protected] low health (56/100) — consider alternatives

Moderate health score (56/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

1/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

5.2/10

moderate

Maintainer trust

Active maintainers (3m)

5

Contributors (12m)

7

Primary author dominance

68%

GitHub stars

71

Quality signals

Download trend

stable(-2.9%)

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (15)

zipp pytest zipp jaraco.test sphinx jaraco.packaging rst.linker furo;sphinx-lint;jaraco.tidelift pytest-checkdocs pytest-ruff pytest-cov;pytest-enabler pytest-mypy

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/importlib_resources