Is packageurl-ruby safe to use?

packageurl-ruby has no known vulnerabilities on the latest version (0.2.0). DepScope rates its health at 43/100 (high risk).

What is the latest version of packageurl-ruby?

The latest version of packageurl-ruby is 0.2.0, released 2025-03-21.

Does packageurl-ruby have known vulnerabilities?

No known vulnerabilities on the latest version of packageurl-ruby.

Is packageurl-ruby deprecated?

No, packageurl-ruby is actively maintained. Latest release: 0.2.0 (2025-03-21).

What are alternatives to packageurl-ruby?

Popular alternatives to packageurl-ruby in RubyGems include: jmespath, netrc, thread_safe, crass, tzinfo.

What license does packageurl-ruby use?

packageurl-ruby is licensed under MIT.

packageurl-ruby

rubygemsv0.2.0

A package URL, or purl, is a URL string used to identify and locate a software package in a mostly universal and uniform way across programing languages, package managers, packaging conventions, tools, APIs and databases.

License MITpermissive2 versions0 deps59,493 weekly dl

package-url/packageurl-ruby

43

/ 100

Health

use with caution

[email protected] low health (43/100) — consider alternatives

Moderate health score (43/100) — verify manually

Health breakdown0 – 100

5/25

maintenance

10/20

popularity

25/25

security

3/15

maturity

0/15

community

Vulnerabilities

0

none known

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/rubygems/packageurl-ruby