Is jupyterlab safe to use?

jupyterlab has 1 known vulnerabilities on the latest version (4.6.1). DepScope rates its health at 71/100 (moderate risk).

What is the latest version of jupyterlab?

The latest version of jupyterlab is 4.6.1, released 2026-06-29.

Does jupyterlab have known vulnerabilities?

Yes. jupyterlab has 1 known vulnerabilities. See depscope.dev/pkg/pypi/jupyterlab for details.

Is jupyterlab deprecated?

No, jupyterlab is actively maintained. Latest release: 4.6.1 (2026-06-29).

What are alternatives to jupyterlab?

Popular alternatives to jupyterlab in PyPI include: python-dateutil, cffi, click, fsspec, h11.

What license does jupyterlab use?

jupyterlab is licensed under BSD-3-Clause.

jupyterlab

pypiv4.6.1

JupyterLab computational environment

License BSD-3-Clausepermissive600 versions49 deps

jupyterlab/jupyterlab

/ 100

Health

safe to use

[email protected] is safe to use (health: 71/100)

Update to >= 6.4.1 to fix known vulnerabilities

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

23/25

security

15/15

maturity

8/15

community

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	BIT-jupyterlab-2021-32797	JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>	6.4.1

OSS Scorecard

OpenSSF security posture score

5.8/10

moderate

Maintainer trust

Active maintainers (3m)

34

Contributors (12m)

34

Primary author dominance

27%

GitHub stars

15,102

Quality signals

Download trend

stable(0%)

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (49)

async-lru httpx ipykernel jinja2 jupyter-builder jupyter-core jupyter-lsp jupyter-server jupyterlab-server notebook-shim packaging tomli tornado

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/jupyterlab