puma has no known vulnerabilities on the latest version (8.0.1). DepScope rates its health at 73/100 (moderate risk).

What is the latest version of puma?

The latest version of puma is 8.0.1, released 2026-04-26.

Does puma have known vulnerabilities?

No known vulnerabilities on the latest version of puma.

No, puma is actively maintained. Latest release: 8.0.1 (2026-04-26).

What are alternatives to puma?

Popular alternatives to puma in RubyGems include: jmespath, netrc, thread_safe, crass, tzinfo.

What license does puma use?

puma is licensed under BSD-3-Clause.

puma

rubygemsv8.0.1

Puma is a simple, fast, multi-threaded, and highly parallel HTTP 1.1 server for Ruby/Rack applications. Puma is intended for use in both development and production environments. It's great for highly parallel Ruby implementations such as JRuby and TruffleRuby as well as as providing process worker support to support CRuby well.

License BSD-3-Clausepermissive20 versions1 deps204,755 weekly dl

puma/puma

/ 100

Health

safe to use

[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

9/15

maturity

0/15

community

Vulnerabilities

none known

Health History

Dependency Tree

License Audit

Dependencies (1)

nio4r

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/rubygems/puma