pysnyk

What it is and what it does

pysnyk is a Python wrapper around the Snyk vulnerability assessment API. It provides object-oriented access to Snyk organizations, projects, dependencies, and vulnerability data, allowing you to programmatically query security information about packages across multiple ecosystems and manage Snyk projects.

The library abstracts the REST API behind manager objects and model classes, so you work with structured objects rather than raw HTTP calls. You can test individual packages for known vulnerabilities, scan entire dependency manifests, retrieve project settings, and manage tags and integrations—all authenticated via an API token. It depends on requests for HTTP, mashumaro for serialization, and retry for fault tolerance.

Use it for:

• Automate vulnerability scanning of dependencies in CI/CD pipelines by testing manifests or individual package versions.
• Bulk-query vulnerability data for dependencies across multiple organizations and projects programmatically.
• Integrate security assessments into custom dashboards or reporting tools that need structured access to project and vulnerability metadata.
• Test manifests from multiple package managers as part of a unified security audit workflow.
• Manage project metadata—tags, settings, and organization membership—via automation rather than manual UI interaction.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

A Python client library for the Snyk API that enables programmatic vulnerability assessment, project management, and dependency testing across multiple package ecosystems.

Yes, if you need programmatic access to the Snyk API and can tolerate dormant maintenance. The library is stable and dependency-light, with no known vulnerabilities and broad Python version support (3.7 through 3.11). However, verify that the API surface matches your target Snyk instance version, and monitor for breaking changes that this client may not track. Not recommended for projects requiring active upstream support or frequent API updates.

Install

pysnyk on PyPI

pip install pysnyk

uv add pysnyk

poetry add pysnyk

Installing pysnyk

Before you install

Low install friction with a pure-Python wheel distribution. Maintenance is dormant—no releases since January 2024 despite a last commit in August 2024, and no updates in nearly 3 years. Suitable for stable, read-heavy workflows but risky for active development against a rapidly evolving API.

License in practice

MIT license is permissive and imposes no restrictions on use, modification, or redistribution in commercial or private projects.

Quickstart

pip install pysnyk

import pysnyk
client = pysnyk.SnykClient("<your-api-token>")
org = client.organizations.first()
result = org.test_python("flask", "0.12.2")

Requires a valid Snyk API token; the public Snyk service is the default but a custom instance URL can be provided.

Verify before relying

• Whether the API surface remains compatible with current Snyk API versions given the dormant maintenance status.
• Performance characteristics when handling large dependency graphs or organizations with many projects.
• Support status for Python versions beyond 3.11 or future breaking changes to the Snyk API.

Package facts

Evidence: pysnyk-0.9.19-py3-none-any.whl

Tags

More Security packages