Is anchore-syft safe to use?

anchore-syft has no known vulnerabilities on the latest version (1.18.1). DepScope rates its health at 39/100 (critical risk).

What is the latest version of anchore-syft?

The latest version of anchore-syft is 1.18.1, released 2025-01-07.

No known vulnerabilities on the latest version of anchore-syft.

No, anchore-syft is actively maintained. Latest release: 1.18.1 (2025-01-07).

Popular alternatives to anchore-syft in PyPI include: boto3, packaging, certifi, urllib3, idna.

anchore-syft is licensed under Apache-2.0.

pypiv1.18.1

CLI tool for generating a Software Bill of Materials from container images and filesystems

License Apache-2.0permissive5 versions0 deps3,254 weekly dl

/ 100

Health

use with caution

[email protected] low health (39/100) — consider alternatives

Health breakdown0 – 100

5/25

maintenance

6/20

popularity

25/25

security

3/15

maturity

0/15

community

Vulnerabilities

none known

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/anchore-syft