Skip to main content
FOSSA Logo
Skip to package details

paramiko

PyPI9.8k GitHub stars

v5.0.0 · May 2026 · LGPL-2.1 (top-level declared license)

pip install paramiko
  • No known CVEs
  • 153.9M downloads/mo
  • 151 versions

Description

The leading native Python SSHv2 protocol library.

Licenses

Declared license

LGPL-2.1 (top-level declared license of paramiko)

Transitive dependency licenses

paramiko pulls in 6 transitive dependencies across 5 distinct licenses, all permissive.

LicenseCategoryDependencies
Apache-2.0Permissive2 of 6
Apache-2.0 OR BSD-3-ClausePermissive1 of 6
BSD-2-ClausePermissive1 of 6
BSD-3-ClausePermissive1 of 6
MIT-0Permissive1 of 6

This view is derived from declared package metadata, and a full FOSSA scan detects licenses that declared metadata misses. Scan free.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.

Need paramiko approved? Get the full license and vulnerability report for your codebase. Scan free.

Scan free

Vulnerabilities

No known CVEs across published versions

Version history

Published versions
VersionPublishedLicense
5.0.0May 2026LGPL-2.1
4.0.0Aug 2025
3.5.1Feb 2025
3.5.0Sep 2024
3.4.1Aug 2024
3.3.2Aug 2024
3.4.0Dec 2023
3.3.1Jul 2023
3.3.0Jul 2023
3.2.0May 2023
3.1.0Mar 2023
3.0.0Jan 2023
2.12.0Nov 2022
2.11.1Nov 2022
2.10.6Nov 2022
2.11.0May 2022
2.10.5May 2022
2.9.5May 2022
2.10.4Apr 2022
2.9.4Apr 2022
2.10.3Mar 2022
2.9.3Mar 2022
2.10.2Mar 2022
2.10.1Mar 2022
2.10.0Mar 2022
25 older releases
Older published versions
VersionPublishedLicense
2.9.2Jan 2022
2.9.1Dec 2021
2.9.0Dec 2021
2.8.1Nov 2021
2.8.0Oct 2021
2.7.2Aug 2020
2.7.1Dec 2019
2.7.0Dec 2019
2.6.0Jun 2019
2.5.1Jun 2019
2.4.3Jun 2019
2.5.0Jun 2019
2.4.2Sep 2018
2.3.3Sep 2018
2.2.4Sep 2018
2.1.6Sep 2018
2.0.9Sep 2018
2.4.1Mar 2018
2.3.2Mar 2018
2.2.3Mar 2018
2.1.5Mar 2018
2.0.8Mar 2018
1.18.5Mar 2018
1.17.6Mar 2018
2.4.0Nov 2017

Latest pre-release: 0.9-horsea (Sep 2012). Pre-releases (canary, beta, release candidate and similar) are not listed.

pip install paramiko resolves to the 5.x line today. Older major lines may still receive fixes.

Direct dependencies

4 direct dependencies, 6 in total including transitive. Licenses across the full tree are summarized under Licenses.

Direct dependencies
PackageVersion rangeLicense
bcrypt>=3.2Apache-2.0
cryptography>=3.3Apache-2.0 OR BSD-3-Clause
invoke>=2.0BSD-2-Clause
pynacl>=1.5Apache-2.0

Based on what each package declares in its published metadata. The dependencies your build actually installs can differ, and a FOSSA scan of your project resolves the full tree.

Popularity

Downloads last month
153.9M
Known dependents in this corpus
3,533
GitHub stars
9.8k
OpenSSF score
4.2 / 10

FAQ

What is the latest version of paramiko?
The latest version of paramiko is 5.0.0, published May 2026.
What license is paramiko under?
paramiko declares LGPL-2.1 as its top-level declared license. Its dependency tree spans 5 distinct licenses.
Does paramiko have known vulnerabilities?
No known CVEs are recorded against published versions of paramiko.
How do I install paramiko?
Install paramiko with pip install paramiko.
How do I generate an SBOM that includes paramiko?
FOSSA's SBOM generator produces SPDX or CycloneDX output for a codebase that includes paramiko. Generate an SPDX or CycloneDX SBOM free.

Dependency graph and package metadata from deps.dev (Google Open Source Insights), used under CC BY 4.0.

Download counts from PyPI Stats, sourced from the Python Software Foundation download statistics. Counts cover the last 180 days and exclude known mirrors.

Repository stars from the GitHub API.

OpenSSF Scorecard results from deps.dev.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.