yt-dlp

pypiv2026.3.17

A feature-rich command-line audio/video downloader

License Unlicense589 versions30 deps
yt-dlp/yt-dlp
60
/ 100
Health
do not use

Do not install. Package is flagged as malicious (advisory GHSA-3v33-3wmw-3785).

Health breakdown0 – 100
20/25
maintenance
0/20
popularity
25/25
security
15/15
maturity
0/15
community
Vulnerabilities
0
none known
⚠ Malicious package
This package is flagged as malicious by the OpenSSF/OSV community feed. Do not install.
Advisory: GHSA-3v33-3wmw-3785 — yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

Health History

Dependency Tree

License Audit

Dependencies (30)
build;hatchlingpip;setuptoolswheel;curl-cfficurl-cfficurl-cffibrotli;brotlicffi;certifi;mutagen;pycryptodomex;requestsurllib3websocketsyt-dlp-ejsdenoautopep8~pre-commit;pytest-rerunfailures~pytest~ruff~pyinstallercffi;secretstorage;autopep8~ruff~pytest-rerunfailures~pytest~
API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/yt-dlp
More from pypi
boto3/packagingurllib3requestscertifityping-extensions
Browse all pypi packages →

Last updated · 2026-03-17T23:42:57.863878Z

yt-dlp — Health Score 60/100 | DepScope | DepScope