Is loofah safe to use?

loofah has no known vulnerabilities on the latest version (2.25.1). DepScope rates its health at 74/100 (moderate risk).

What is the latest version of loofah?

The latest version of loofah is 2.25.1, released 2026-03-17.

Does loofah have known vulnerabilities?

No known vulnerabilities on the latest version of loofah.

Is loofah deprecated?

No, loofah is actively maintained. Latest release: 2.25.1 (2026-03-17).

What are alternatives to loofah?

Popular alternatives to loofah in RubyGems include: jmespath, netrc, thread_safe, crass, tzinfo.

loofah

rubygemsv2.25.1

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah also includes some HTML sanitizers based on `html5lib`'s safelist, which are a specific application of the general transformation functionality.

License MITpermissive20 versions2 deps7,450,003 weekly dl

flavorjones/loofah

/ 100

Health

safe to use

[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

20/25

maintenance

17/20

popularity

25/25

security

9/15

maturity

3/15

community

Vulnerabilities

none known

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

2

Primary author dominance

94%

GitHub stars

983

single active maintainer 3msingle author dominance

Quality signals

OSS Criticality

0.45medium

Health History

Dependency Tree

License Audit

Dependencies (2)

crass nokogiri

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/rubygems/loofah