Skip to main content
FOSSA Logo

PyPI packages

License and vulnerability reference for 25 PyPI packages. Each page shows the top-level declared license, CVE-linked advisories, published versions, and the licenses carried by the package's transitive dependencies.

Most in-demand PyPI packages

Licenses shown are each package's top-level declared license.

  • tiktokentiktoken is a fast BPE tokeniser for use with OpenAI's models.
    License: unresolved in metadataNo known CVE-linked advisories
  • pdfplumberPlumb a PDF for detailed information about each char, rectangle, line, et cetera — and easily extract text and tables.
    MITNo known CVE-linked advisories
  • cycloptsIntuitive, easy CLIs based on python type hints.
    Apache-2.0No known CVE-linked advisories
  • langchain-openaiThe agent engineering platform.
    MITNo known CVE-linked advisories
  • paramikoThe leading native Python SSHv2 protocol library.
    LGPL-2.1No known CVE-linked advisories
  • aiohttpAsynchronous HTTP client/server framework for asyncio and Python
    Apache-2.0 AND MITNo known CVE-linked advisories
  • awscliUniversal Command Line Interface for Amazon Web Services
    Apache-2.0No known CVE-linked advisories
  • gcsfsPythonic file-system interface for Google Cloud Storage
    BSD-3-ClauseNo known CVE-linked advisories
  • pydantic-settingsSettings management using pydantic
    MITNo known CVE-linked advisories
  • ipykernelIPython Kernel for Jupyter
    BSD-3-ClauseNo known CVE-linked advisories
  • pygithubTyped interactions with the GitHub API v3
    License: unresolved in metadataNo known CVE-linked advisories
  • dbt-coredbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
    Apache-2.0No known CVE-linked advisories
  • pytest-covCoverage plugin for pytest.
    MITNo known CVE-linked advisories
  • pre-commitA framework for managing and maintaining multi-language pre-commit hooks.
    MITNo known CVE-linked advisories
  • langchain-coreThe agent engineering platform.
    MITNo known CVE-linked advisories
  • google-api-python-client🐍 The official Python client library for Google's discovery based APIs.
    Apache-2.0No known CVE-linked advisories
  • pytest-xdistpytest plugin for distributed testing and loop-on-failures testing modes.
    MITNo known CVE-linked advisories
  • pytest-mockThin-wrapper around the mock package for easier use with pytest
    MITNo known CVE-linked advisories
  • textualThe lean application framework for Python. Build sophisticated user interfaces with a simple Python API. Run your apps in the terminal and a web browser.
    MITNo known CVE-linked advisories
  • ipythonOfficial repository for IPython itself. Other repos in the IPython organization contain things like the website, documentation builds, etc.
    BSD-3-ClauseNo known CVE-linked advisories

Recently updated

Licenses shown are each package's top-level declared license.

  • langchain-openaiThe agent engineering platform.
    v1.6.6 Sep 2026MITNo known CVE-linked advisories
  • dbt-coredbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
    v1.12.5 Sep 2026Apache-2.0No known CVE-linked advisories
  • cycloptsIntuitive, easy CLIs based on python type hints.
    v4.23.2 Aug 2026Apache-2.0No known CVE-linked advisories
  • google-api-python-client🐍 The official Python client library for Google's discovery based APIs.
    v2.199.0 Aug 2026Apache-2.0No known CVE-linked advisories
  • pygithubTyped interactions with the GitHub API v3
    v2.10.0 Aug 2026License: unresolved in metadataNo known CVE-linked advisories
  • langchain-coreThe agent engineering platform.
    v1.6.0 Aug 2026MITNo known CVE-linked advisories
  • tiktokentiktoken is a fast BPE tokeniser for use with OpenAI's models.
    v0.14.0 Aug 2026License: unresolved in metadataNo known CVE-linked advisories
  • gcsfsPythonic file-system interface for Google Cloud Storage
    v2026.8.0 Aug 2026BSD-3-ClauseNo known CVE-linked advisories
  • pre-commitA framework for managing and maintaining multi-language pre-commit hooks.
    v4.6.2 Aug 2026MITNo known CVE-linked advisories
  • snowflake-connector-pythonSnowflake Connector for Python
    v4.7.2 Aug 2026Apache-2.0No known CVE-linked advisories

Browse all 25 PyPI packages

Open the full PyPI index, ordered by search demand

These pages read declared metadata. Run the same license and vulnerability view across your PyPI dependencies, where a full scan resolves what metadata leaves out.

Scan free

Dependency graph and package metadata from deps.dev (Google Open Source Insights), used under CC BY 4.0.

Vulnerability data from the Open Source Vulnerability (OSV) database, including the GitHub Advisory Database and the PyPI Advisory Database, used under CC BY 4.0. Only CVE-linked advisories are shown.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.