Is msgpack safe to use?

msgpack has no known vulnerabilities on the latest version (1.2.1). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of msgpack?

The latest version of msgpack is 1.2.1, released 2026-06-18.

Does msgpack have known vulnerabilities?

No known vulnerabilities on the latest version of msgpack.

Is msgpack deprecated?

No, msgpack is actively maintained. Latest release: 1.2.1 (2026-06-18).

What are alternatives to msgpack?

Popular alternatives to msgpack in PyPI include: certifi, cryptography, python-dateutil, pyyaml, anyio.

What license does msgpack use?

msgpack is licensed under Apache-2.0.

msgpack

pypiv1.2.1

MessagePack serializer

License Apache-2.0permissive33 versions0 deps

msgpack/msgpack-python/

/ 100

Health

use with caution

[email protected] low health (62/100) — consider alternatives

Moderate health score (62/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

Maintainer trust

Active maintainers (3m)

2

Contributors (12m)

5

Primary author dominance

67%

GitHub stars

2,077

Quality signals

OSS Criticality

0.78critical

Download trend

stable(0%)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/msgpack