A curated list of insecure Python packages
A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
A curated list of insecure Python packages launched on October 27, 2016 with 94 votes, #428 of 3,690 launches that month and more than 95% of that year's launches. The site was still online in September 2026, 9 years on.
In plain words
A curated list that identifies insecure Python packages, helping developers avoid vulnerable dependencies in their projects. It's designed for Python developers who need to check whether packages they use have known security issues. The resource compiles information about problematic packages in one place, making it easier to stay informed about security risks rather than discovering them through other means.
written from the facts on this page · September 2026
Does a similar job
all alternatives →
Hatch – A modern project, package, and virtual env manager for Python2017 · github.com · ▲108Modern, extensible Python project management. Contribute to pypa/hatch development by creating an account on GitHub.
Python requirements for Humans2016 · github.com · ▲78Python requirements made easy. Contribute to toxinu/requirements development by creating an account on GitHub.
zodiac, a new approach to monkey patching in python2012 · github.com · ▲39A monkeypatching library for python. Contribute to colinmarc/zodiac development by creating an account on GitHub.
Pipask – safer pip without compromising convenience2025 · github.com · ▲52Pipask is a drop-in replacement for pip that addresses a serious security flaw: standard pip executes arbitrary code from source distributions during dependency resolution, without warning or consent. Pipask retrieves metadata through PyPI's JSON API first, then checks repository popularity, download counts, package age, and known vulnerabilities before allowing installation. It presents you with a pretty report and asks for you consent with installation, giving you control over what code runs on your system. More details in the intro blog post:…
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 27d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 25d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 22d ago · openbot.run
Talanoa▲340Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 27d ago · corespeed.io
Source: Show HN post ↗
Launched alongside, October 2016
the whole month →
Without your consent most major web platforms leak whether you are logged in. This allows any website to detect on which platforms you
Growth · 2016 · robinlinus.github.io
Surface Studio▲832A brilliant screen for your ideas, from Microsoft
Life & fun · 2016 · microsoft.com
