Skip to main content
FOSSA Logo

Open source packages

Reference pages for open source packages across npm, PyPI, and Maven. Each page shows the top-level declared license, known CVE-linked advisories, version history, and the licenses that appear across the package's transitive dependency tree. Package metadata comes from the public registries and deps.dev, advisory data from OSV; FOSSA builds the same view against your own codebase, where a full scan detects licenses that declared metadata misses.

Packages
30
Ecosystems
3
Most common license
MIT
Latest release indexed
Oct 2026

Most in-demand packages

Licenses shown are each package's top-level declared license.

  • eslint-plugin-react-hooks

    The library for web and native user interfaces.

    v7.1.1MIT

    No known CVE-linked advisories
  • tiktoken

    tiktoken is a fast BPE tokeniser for use with OpenAI's models.

    v0.14.0License: unresolved in metadata

    No known CVE-linked advisories
  • pdfplumber

    Plumb a PDF for detailed information about each char, rectangle, line, et cetera — and easily extract text and tables.

    v0.11.10MIT

    No known CVE-linked advisories
  • cyclopts

    Intuitive, easy CLIs based on python type hints.

    v5.2.0Apache-2.0

    No known CVE-linked advisories
  • langchain-openai

    The agent engineering platform.

    v1.7.0MIT

    No known CVE-linked advisories
  • paramiko

    The leading native Python SSHv2 protocol library.

    v5.0.0LGPL-2.1

    No known CVE-linked advisories
  • aiohttpPyPIAsynchronous HTTP client/server framework for asyncio and Python
    v3.14.5Apache-2.0 AND MITNo known CVE-linked advisories
  • awscliPyPIUniversal Command Line Interface for Amazon Web Services
    v1.46.1Apache-2.0No known CVE-linked advisories
  • jsdomnpmA JavaScript implementation of various web standards, for use with Node.js
    v30.1.2MITNo known CVE-linked advisories
  • gcsfsPyPIPythonic file-system interface for Google Cloud Storage
    v2026.10.0BSD-3-ClauseNo known CVE-linked advisories
  • pydantic-settingsPyPISettings management using pydantic
    v2.15.0MITNo known CVE-linked advisories
  • ipykernelPyPIIPython Kernel for Jupyter
    v7.4.0BSD-3-ClauseNo known CVE-linked advisories
  • pygithubPyPITyped interactions with the GitHub API v3
    v2.10.0License: unresolved in metadataNo known CVE-linked advisories
  • dbt-corePyPIdbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
    v1.12.5Apache-2.0No known CVE-linked advisories
  • pytest-covPyPICoverage plugin for pytest.
    v7.1.0MITNo known CVE-linked advisories
  • pre-commitPyPIA framework for managing and maintaining multi-language pre-commit hooks.
    v4.6.2MITNo known CVE-linked advisories
  • langchain-corePyPIThe agent engineering platform.
    v1.6.9MITNo known CVE-linked advisories
  • google-api-python-clientPyPI🐍 The official Python client library for Google's discovery based APIs.
    v2.201.0Apache-2.0No known CVE-linked advisories
  • pytest-xdistPyPIpytest plugin for distributed testing and loop-on-failures testing modes.
    v3.8.0MITNo known CVE-linked advisories
  • pytest-mockPyPIThin-wrapper around the mock package for easier use with pytest
    v3.16.0MITNo known CVE-linked advisories

Recently updated

Licenses shown are each package's top-level declared license.

  • aiohttpPyPIAsynchronous HTTP client/server framework for asyncio and Python
    v3.14.5 Oct 2026Apache-2.0 AND MITNo known CVE-linked advisories
  • langchain-corePyPIThe agent engineering platform.
    v1.6.9 Oct 2026MITNo known CVE-linked advisories
  • langchain-openaiPyPIThe agent engineering platform.
    v1.7.0 Oct 2026MITNo known CVE-linked advisories
  • cycloptsPyPIIntuitive, easy CLIs based on python type hints.
    v5.2.0 Oct 2026Apache-2.0No known CVE-linked advisories
  • jsdomnpmA JavaScript implementation of various web standards, for use with Node.js
    v30.1.2 Oct 2026MITNo known CVE-linked advisories
  • google-cloud-secret-managerPyPIGoogle Cloud Client Libraries for Python
    v2.31.0 Oct 2026Apache-2.0No known CVE-linked advisories
  • google-cloud-computePyPIGoogle Cloud Client Libraries for Python
    v1.55.0 Oct 2026Apache-2.0No known CVE-linked advisories
  • gcsfsPyPIPythonic file-system interface for Google Cloud Storage
    v2026.10.0 Oct 2026BSD-3-ClauseNo known CVE-linked advisories
  • aiobotocorePyPIasyncio support for botocore library using aiohttp
    v3.9.2 Oct 2026Apache-2.0No known CVE-linked advisories
  • google-api-python-clientPyPI🐍 The official Python client library for Google's discovery based APIs.
    v2.201.0 Sep 2026Apache-2.0No known CVE-linked advisories
  • snowflake-connector-pythonPyPISnowflake Connector for Python
    v4.8.0 Sep 2026Apache-2.0No known CVE-linked advisories
  • ipykernelPyPIIPython Kernel for Jupyter
    v7.4.0 Sep 2026BSD-3-ClauseNo known CVE-linked advisories
  • pytest-mockPyPIThin-wrapper around the mock package for easier use with pytest
    v3.16.0 Sep 2026MITNo known CVE-linked advisories
  • dbt-corePyPIdbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
    v1.12.5 Sep 2026Apache-2.0No known CVE-linked advisories
  • ipythonPyPIOfficial repository for IPython itself. Other repos in the IPython organization contain things like the website, documentation builds, etc.
    v9.17.1 Sep 2026BSD-3-ClauseNo known CVE-linked advisories
  • awscliPyPIUniversal Command Line Interface for Amazon Web Services
    v1.46.1 Aug 2026Apache-2.0No known CVE-linked advisories
  • pygithubPyPITyped interactions with the GitHub API v3
    v2.10.0 Aug 2026License: unresolved in metadataNo known CVE-linked advisories
  • tiktokenPyPItiktoken is a fast BPE tokeniser for use with OpenAI's models.
    v0.14.0 Aug 2026License: unresolved in metadataNo known CVE-linked advisories
  • pre-commitPyPIA framework for managing and maintaining multi-language pre-commit hooks.
    v4.6.2 Aug 2026MITNo known CVE-linked advisories
  • pydantic-settingsPyPISettings management using pydantic
    v2.15.0 Aug 2026MITNo known CVE-linked advisories

Browse every package

These pages read declared metadata. Run the same license and vulnerability view across your dependencies, where a full scan resolves what metadata leaves out.

Scan free

Dependency graph and package metadata from deps.dev (Google Open Source Insights), used under CC BY 4.0.

Vulnerability data from the Open Source Vulnerability (OSV) database, including the GitHub Advisory Database and the PyPI Advisory Database, used under CC BY 4.0. Only CVE-linked advisories are shown.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.