Is pkginfo2 safe to use?

pkginfo2 has no known vulnerabilities on the latest version (30.1.0). DepScope rates its health at 40/100 (high risk).

What is the latest version of pkginfo2?

The latest version of pkginfo2 is 30.1.0, released 2025-10-27.

Does pkginfo2 have known vulnerabilities?

No known vulnerabilities on the latest version of pkginfo2.

Is pkginfo2 deprecated?

No, pkginfo2 is actively maintained. Latest release: 30.1.0 (2025-10-27).

What are alternatives to pkginfo2?

Popular alternatives to pkginfo2 in PyPI include: boto3, packaging, urllib3, idna, certifi.

What license does pkginfo2 use?

pkginfo2 is licensed under MIT.

pkginfo2

pypiv30.1.0

Query metadata from sdists / bdists / installed packages. Safer fork of pkginfo to avoid doing arbitrary imports and eval.

License MITpermissive2 versions1 maintainers12 deps

aboutcode-org/pkginfo2

/ 100

Health

use with caution

[email protected] low health (40/100) — consider alternatives

Moderate health score (40/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

Health History

Dependency Tree

License Audit

Dependencies (12)

pytest pytest-xdist aboutcode-toolkit twine;ruff;Sphinx sphinx-rtd-theme sphinx-reredirects doc8 sphinx-autobuild;sphinx-rtd-dark-mode sphinx-copybutton;

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/pkginfo2