Is prometheus_client safe to use?

prometheus_client has no known vulnerabilities on the latest version (0.26.0). DepScope rates its health at 70/100 (moderate risk).

What is the latest version of prometheus_client?

The latest version of prometheus_client is 0.26.0, released 2026-07-24.

Does prometheus_client have known vulnerabilities?

No known vulnerabilities on the latest version of prometheus_client.

Is prometheus_client deprecated?

No, prometheus_client is actively maintained. Latest release: 0.26.0 (2026-07-24).

What are alternatives to prometheus_client?

Popular alternatives to prometheus_client in PyPI include: packaging, urllib3, cryptography, pygments, pluggy.

What license does prometheus_client use?

prometheus_client is licensed under Apache-2.0 AND BSD-2-Clause.

prometheus_client

pypiv0.26.0

Python client for the Prometheus monitoring system.

License Apache-2.0 AND BSD-2-Clausepermissive60 versions3 deps

prometheus/client_python

70

/ 100

Health

safe to use

[email protected] is safe to use (health: 70/100)

Health breakdown

0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

0

none known

OSS Scorecard

OpenSSF security posture score

6.3/10

moderate

Maintainer trust

Active maintainers (3m)

4

Contributors (12m)

20

Primary author dominance

42%

GitHub stars

4,308

Quality signals

OSS Criticality

0.78critical

Download trend

rapid decline(-65.8%)

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (3)

twisted;aiohttp;django;

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/prometheus_client