{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Safety CLI scans Python project dependencies for known vulnerabilities and malicious packages, then reports findings and can automatically update vulnerable dependencies to secure versions.","skillfed_tags":["supply-chain-security","cli-tool","dependency-audit"],"use_cases":["Scan a local project directory before committing code to detect vulnerable dependencies early in development","Integrate into GitHub Actions or other CI/CD pipelines to block builds when high-severity vulnerabilities are found","Automatically remediate vulnerable dependencies by running `safety scan --apply-fixes` to update requirements files","Generate SBOM or JSON reports for compliance audits and supply chain transparency documentation","Monitor system-wide dependencies on developer machines to detect risks in installed tools and runtimes"],"what_it_does":"Safety CLI is a command-line tool that scans Python project dependencies against a vulnerability database to identify packages with known security issues and detect malicious packages. It integrates into development workflows, CI/CD pipelines, and production systems to catch supply chain risks early. The tool can output findings in multiple formats (JSON, SBOM, HTML, text) and optionally apply automated fixes to update vulnerable dependencies to secure versions.\n\nThe package depends on a suite of common Python libraries\u2014httpx for HTTP requests, pydantic for data validation, typer for CLI structure, and others\u2014to deliver scanning, authentication, and reporting. It requires Python >=3.9 and is actively maintained with recent releases. A free tier is available after an initial trial period, though access to the full vulnerability database requires a paid subscription.","worth_installing":"Yes, if you need Python dependency vulnerability scanning. Safety CLI is actively maintained, has low install friction, and integrates well into CI/CD workflows. The free tier is limited but available; commercial use and comprehensive coverage require a paid plan. No known vulnerabilities in the package itself as of the fact sheet date."},"id":"safety","links":{"html":"https://skillfed.io/packages/safety","md":"https://skillfed.io/packages/safety.md","pypi":"https://pypi.org/project/safety/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-05-29","license_spdx":"MIT","license_treatment":"permissive","name":"safety","python_support":"supports_current","summary":"Scan dependencies for known vulnerabilities and licenses."},"popularity":{"monthly_downloads":5775644,"position":2040,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"3.8.1"}