Is xgboost safe to use?

xgboost has no known vulnerabilities on the latest version (3.2.0). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of xgboost?

The latest version of xgboost is 3.2.0, released 2026-02-26.

Does xgboost have known vulnerabilities?

No known vulnerabilities on the latest version of xgboost.

Is xgboost deprecated?

No, xgboost is actively maintained. Latest release: 3.2.0 (2026-02-26).

What are alternatives to xgboost?

DepScope has no curated alternatives for xgboost at this time.

What license does xgboost use?

xgboost is licensed under Apache-2.0.

xgboost

condav3.2.0

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library, for Python, R, Java, Scala, C++ and more. Runs on single machine, Hadoop, Spark, Flink and DataFlow

License Apache-2.0permissive42 versions1 maintainers0 deps24,213 weekly dl

dmlc/xgboost/

/ 100

Health

safe to use

[email protected] is safe to use (health: 69/100)

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

6.3/10

moderate

Maintainer trust

Active maintainers (3m)

18

Contributors (12m)

18

Primary author dominance

40%

GitHub stars

28,290

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/conda/xgboost

First published · 2020-07-02 21:36:28.150000+00:00

Last updated · 2026-02-26 21:35:23.462000+00:00