Is psych safe to use?

psych has no known vulnerabilities on the latest version (5.3.1). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of psych?

The latest version of psych is 5.3.1, released 2025-12-17.

Does psych have known vulnerabilities?

No known vulnerabilities on the latest version of psych.

No, psych is actively maintained. Latest release: 5.3.1 (2025-12-17).

What are alternatives to psych?

Popular alternatives to psych in RubyGems include: jmespath, netrc, thread_safe, crass, tzinfo.

psych

rubygemsv5.3.1

Psych is a YAML parser and emitter. Psych leverages libyaml[https://pyyaml.org/wiki/LibYAML] for its YAML parsing and emitting capabilities. In addition to wrapping libyaml, Psych also knows how to serialize and de-serialize most Ruby objects to and from the YAML format.

License MITpermissive20 versions2 deps18,233,224 weekly dl

ruby/psych

/ 100

Health

safe to use

[email protected] is safe to use (health: 69/100)

Health breakdown0 – 100

15/25

maintenance

20/20

popularity

25/25

security

9/15

maturity

0/15

community

Vulnerabilities

none known

Maintainer trust

Active maintainers (3m)

3

Contributors (12m)

20

Primary author dominance

22%

GitHub stars

581

Quality signals

Download trend

stable(0%)

Health History

Dependency Tree

License Audit

Dependencies (2)

date stringio

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/rubygems/psych