Is vyper safe to use?

vyper has 2 known vulnerabilities on the latest version (0.4.3). DepScope rates its health at 50/100 (high risk).

What is the latest version of vyper?

The latest version of vyper is 0.4.3, released 2025-06-18.

Yes. vyper has 2 known vulnerabilities. See depscope.dev/pkg/pypi/vyper for details.

No, vyper is actively maintained. Latest release: 0.4.3 (2025-06-18).

Popular alternatives to vyper in PyPI include: boto3, boto3/, packaging, urllib3/, certifi.

vyper is licensed under Apache License 2.0.

pypiv0.4.3

Vyper: the Pythonic Programming Language for the EVM

License Apache License 2.0permissive74 versions1 maintainers51 deps

/ 100

Health

safe to use

[email protected] is safe to use (health: 50/100)

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

23/25

security

15/15

maturity

2/15

community

Vulnerabilities

1 medium1 low

Advisories (2)

Severity	ID	Summary	Fixed in
low	CVE-2025-21607	Vyper Does Not Check the Success of Certain Precompile Calls	—
medium	CVE-2023-39363	Vyer is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In versions 0.2.15, 0.2.16 and 0.3.0, named re-entrancy locks are allocated incorrectly. Each function using a named re-entrancy lock gets a unique lock regardless of the key, allowing cross-function re-entrancy in contracts compiled with the susceptible versions. A specific set of conditions is required to result in misbehavior of affected contracts, specifically: a `.vy` contract compiled with `vyper` versions `	—

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/vyper