Is xmltodict safe to use?

xmltodict has no known vulnerabilities on the latest version (1.0.4). DepScope rates its health at 64/100 (moderate risk).

What is the latest version of xmltodict?

The latest version of xmltodict is 1.0.4, released 2026-02-22.

Does xmltodict have known vulnerabilities?

No known vulnerabilities on the latest version of xmltodict.

Is xmltodict deprecated?

No, xmltodict is actively maintained. Latest release: 1.0.4 (2026-02-22).

What are alternatives to xmltodict?

Popular alternatives to xmltodict in PyPI include: boto3, packaging, certifi, urllib3, idna.

What license does xmltodict use?

xmltodict is licensed under MIT.

xmltodict

pypiv1.0.4

Makes working with XML feel like you are working with JSON

License MITpermissive38 versions1 maintainers2 deps

martinblech/xmltodict

/ 100

Health

use with caution

[email protected] low health (64/100) — consider alternatives

Moderate health score (64/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

7/15

community

Vulnerabilities

none known

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

0

Primary author dominance

0%

GitHub stars

5,734

single active maintainer 3m

Quality signals

OSS Criticality

0.49medium

Download trend

stable(0%)

Health History

Dependency Tree

License Audit

Dependencies (2)

pytest;pytest-cov;

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/xmltodict