Is jsonpath-ng safe to use?

jsonpath-ng has no known vulnerabilities on the latest version (1.8.0). DepScope rates its health at 59/100 (high risk).

What is the latest version of jsonpath-ng?

The latest version of jsonpath-ng is 1.8.0, released 2026-02-28.

Does jsonpath-ng have known vulnerabilities?

No known vulnerabilities on the latest version of jsonpath-ng.

Is jsonpath-ng deprecated?

No, jsonpath-ng is actively maintained. Latest release: 1.8.0 (2026-02-28).

What are alternatives to jsonpath-ng?

Popular alternatives to jsonpath-ng in PyPI include: typing_extensions, six, annotated_types, typing_inspection, mdurl.

What license does jsonpath-ng use?

jsonpath-ng is licensed under Apache 2.0.

jsonpath-ng

pypiv1.8.0

A final implementation of JSONPath for Python that aims to be standard compliant, including arithmetic and binary comparison operators and providing clear AST for metaprogramming.

License Apache 2.0permissive11 versions1 maintainers0 deps

h2non/jsonpath-ng

/ 100

Health

use with caution

[email protected] low health (59/100) — consider alternatives

Moderate health score (59/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

5/15

community

Vulnerabilities

none known

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/jsonpath-ng