Is tree-sitter-hcl safe to use?

tree-sitter-hcl has no known vulnerabilities on the latest version (1.2.0). DepScope rates its health at 57/100 (high risk).

What is the latest version of tree-sitter-hcl?

The latest version of tree-sitter-hcl is 1.2.0, released 2025-06-16.

Does tree-sitter-hcl have known vulnerabilities?

No known vulnerabilities on the latest version of tree-sitter-hcl.

Is tree-sitter-hcl deprecated?

No, tree-sitter-hcl is actively maintained. Latest release: 1.2.0 (2025-06-16).

What are alternatives to tree-sitter-hcl?

Popular alternatives to tree-sitter-hcl in PyPI include: boto3, packaging, certifi, urllib3, idna.

What license does tree-sitter-hcl use?

tree-sitter-hcl is licensed under Apache-2.0.

tree-sitter-hcl

pypiv1.2.0

HCL and terraform grammar for tree-sitter

License Apache-2.0permissive1 versions1 deps5,669 weekly dl

tree-sitter-grammars/tree-sitter-hcl

/ 100

Health

use with caution

[email protected] low health (57/100) — consider alternatives

Moderate health score (57/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

6/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

⚠ Possible typosquat

Name is close to a popular package. Targets:

tree-sitter-c (close_name dist 2)

Health History

Dependency Tree

License Audit

Dependencies (1)

tree-sitter~

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/tree-sitter-hcl