Is jsonpath-ng safe to use?

jsonpath-ng has no known vulnerabilities on the latest version (1.8.0). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of jsonpath-ng?

The latest version of jsonpath-ng is 1.8.0, released 2026-02-28.

Does jsonpath-ng have known vulnerabilities?

No known vulnerabilities on the latest version of jsonpath-ng.

Is jsonpath-ng deprecated?

No, jsonpath-ng is actively maintained. Latest release: 1.8.0 (2026-02-28).

What are alternatives to jsonpath-ng?

Popular alternatives to jsonpath-ng in PyPI include: urllib3, pyyaml, pycparser, pydantic-core, pydantic_core.

What license does jsonpath-ng use?

jsonpath-ng is licensed under Apache 2.0.

jsonpath-ng

pypiv1.8.0

A final implementation of JSONPath for Python that aims to be standard compliant, including arithmetic and binary comparison operators and providing clear AST for metaprogramming.

License Apache 2.0permissive11 versions1 maintainers0 deps14,321,130 weekly dl

h2non/jsonpath-ng

/ 100

Health

use with caution

[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

9/15

maturity

5/15

community

0/15

popularity_floor

Vulnerabilities

none known

Quality signals

OSS Criticality

0.73critical

Publish security

API token

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/jsonpath-ng