Is tomli safe to use?

tomli has no known vulnerabilities on the latest version (2.4.1). DepScope rates its health at 64/100 (moderate risk).

What is the latest version of tomli?

The latest version of tomli is 2.4.1, released 2026-03-25.

Does tomli have known vulnerabilities?

No known vulnerabilities on the latest version of tomli.

No, tomli is actively maintained. Latest release: 2.4.1 (2026-03-25).

What are alternatives to tomli?

Popular alternatives to tomli in PyPI include: boto3, packaging, idna, certifi, urllib3.

tomli

pypiv2.4.1

A lil' TOML parser

License MITpermissive30 versions0 deps

hukkin/tomli

/ 100

Health

use with caution

[email protected] low health (64/100) — consider alternatives

Moderate health score (64/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

4.9/10

weak

Maintainer trust

Active maintainers (3m)

4

Contributors (12m)

7

Primary author dominance

71%

GitHub stars

560

Quality signals

OSS Criticality

0.52high

Download trend

stable(0%)

Publish security

API token

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/tomli

tomli

pypiv2.4.1

A lil' TOML parser

License MITpermissive30 versions0 deps

hukkin/tomli

/ 100

Health

use with caution

[email protected] low health (64/100) — consider alternatives

Moderate health score (64/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

4.9/10

weak

Maintainer trust

Active maintainers (3m)

4

Contributors (12m)

7

Primary author dominance

71%

GitHub stars

560

Quality signals

OSS Criticality

0.52high

Download trend

stable(0%)

Publish security

API token

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/tomli