yarl has no known vulnerabilities on the latest version (1.24.2). DepScope rates its health at 92/100 (low risk).

What is the latest version of yarl?

The latest version of yarl is 1.24.2, released 2026-05-19.

Does yarl have known vulnerabilities?

No known vulnerabilities on the latest version of yarl.

No, yarl is actively maintained. Latest release: 1.24.2 (2026-05-19).

What are alternatives to yarl?

Popular alternatives to yarl in PyPI include: boto3, packaging, idna, certifi, urllib3.

What license does yarl use?

yarl is licensed under Apache-2.0.

yarl

pypiv1.24.2

Yet another URL library

License Apache-2.0permissive137 versions1 maintainers3 deps136,718,361 weekly dl

aio-libs/yarl

/ 100

Health

safe to use

[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

7/15

community

0/15

popularity_floor

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

6.8/10

moderate

Maintainer trust

Active maintainers (3m)

5

Contributors (12m)

12

Primary author dominance

54%

GitHub stars

1,478

Quality signals

OSS Criticality

0.53high

Download trend

stable(+8.1%)

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (3)

idna multidict propcache

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/yarl

yarl

pypiv1.24.2

Yet another URL library

License Apache-2.0permissive137 versions1 maintainers3 deps136,718,361 weekly dl

aio-libs/yarl

/ 100

Health

safe to use

[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

7/15

community

0/15

popularity_floor

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

6.8/10

moderate

Maintainer trust

Active maintainers (3m)

5

Contributors (12m)

12

Primary author dominance

54%

GitHub stars

1,478

Quality signals

OSS Criticality

0.53high

Download trend

stable(+8.1%)

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (3)

idna multidict propcache

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/yarl