Is prometheus_client safe to use?

prometheus_client has no known vulnerabilities on the latest version (0.25.0). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of prometheus_client?

The latest version of prometheus_client is 0.25.0, released 2026-04-09.

Does prometheus_client have known vulnerabilities?

No known vulnerabilities on the latest version of prometheus_client.

Is prometheus_client deprecated?

No, prometheus_client is actively maintained. Latest release: 0.25.0 (2026-04-09).

What are alternatives to prometheus_client?

Popular alternatives to prometheus_client in PyPI include: python-dateutil, cffi, click, fsspec, h11.

What license does prometheus_client use?

prometheus_client is licensed under Apache-2.0 AND BSD-2-Clause.

prometheus_client

pypiv0.25.0

Python client for the Prometheus monitoring system.

License Apache-2.0 AND BSD-2-Clausepermissive59 versions3 deps

prometheus/client_python

/ 100

Health

use with caution

[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

6.3/10

moderate

Maintainer trust

Active maintainers (3m)

4

Contributors (12m)

20

Primary author dominance

42%

GitHub stars

4,308

Quality signals

OSS Criticality

0.50medium

Download trend

stable(+4.1%)

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (3)

twisted;aiohttp;django;

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/prometheus_client