Is rexml safe to use?

rexml has no known vulnerabilities on the latest version (3.4.4). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of rexml?

The latest version of rexml is 3.4.4, released 2025-09-10.

Does rexml have known vulnerabilities?

No known vulnerabilities on the latest version of rexml.

No, rexml is actively maintained. Latest release: 3.4.4 (2025-09-10).

What are alternatives to rexml?

Popular alternatives to rexml in RubyGems include: jmespath, netrc, thread_safe, crass, tzinfo.

What license does rexml use?

rexml is licensed under BSD-2-Clause.

rexml

rubygemsv3.4.4

An XML toolkit for Ruby

License BSD-2-Clausepermissive20 versions0 deps61,908,803 weekly dl

ruby/rexml

/ 100

Health

safe to use

[email protected] is safe to use (health: 66/100)

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

4.0/10

weak

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

6

Primary author dominance

54%

GitHub stars

165

single active maintainer 3m

Quality signals

OSS Criticality

0.51high

Download trend

stable(+4%)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/rubygems/rexml