pysnyk
A Python client for the Snyk API
Decision gist · record as of 2026-08-14
Yes, if you need programmatic access to the Snyk API and can tolerate dormant maintenance. The library is stable and dependency-light, with no known vulnerabilities and broad Python version support (3.7 through 3.11). However, verify that the API surface matches your target Snyk instance version, and monitor for breaking changes that this client may not track. Not recommended for projects requiring active upstream support or frequent API updates.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires a valid Snyk API token; the public Snyk service is the default but a custom instance URL can be provided.
- Low install friction with a pure-Python wheel distribution.
- Maintenance is dormant—no releases since January 2024 despite a last commit in August 2024, and no updates in nearly 3 years.
License · maintenance · safety
MIT (permissive) — MIT license is permissive and imposes no restrictions on use, modification, or redistribution in commercial or private projects.
last release 2024-01-13 (944 days) · last repo commit 2024-08-20 · 100 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 268,563 downloads/mo, #8,273 on PyPI
Alternatives
Verify before relying
pip install pysnyk
import pysnyk
client = pysnyk.SnykClient("<your-api-token>")
org = client.organizations.first()
result = org.test_python("flask", "0.12.2")- Whether the API surface remains compatible with current Snyk API versions given the dormant maintenance status.
- Performance characteristics when handling large dependency graphs or organizations with many projects.
- Support status for Python versions beyond 3.11 or future breaking changes to the Snyk API.
What it is and what it does
pysnyk is a Python wrapper around the Snyk vulnerability assessment API. It provides object-oriented access to Snyk organizations, projects, dependencies, and vulnerability data, allowing you to programmatically query security information about packages across multiple ecosystems and manage Snyk projects.
The library abstracts the REST API behind manager objects and model classes, so you work with structured objects rather than raw HTTP calls. You can test individual packages for known vulnerabilities, scan entire dependency manifests, retrieve project settings, and manage tags and integrations—all authenticated via an API token. It depends on requests for HTTP, mashumaro for serialization, and retry for fault tolerance.
Use it for
- Automate vulnerability scanning of dependencies in CI/CD pipelines by testing manifests or individual package versions.
- Bulk-query vulnerability data for dependencies across multiple organizations and projects programmatically.
- Integrate security assessments into custom dashboards or reporting tools that need structured access to project and vulnerability metadata.
- Test manifests from multiple package managers as part of a unified security audit workflow.
- Manage project metadata—tags, settings, and organization membership—via automation rather than manual UI interaction.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you need programmatic access to the Snyk API and can tolerate dormant maintenance.
The library is stable and dependency-light, with no known vulnerabilities and broad Python version support (3.7 through 3.11). However, verify that the API surface matches your target Snyk instance version, and monitor for breaking changes that this client may not track. Not recommended for projects requiring active upstream support or frequent API updates.
Install
pysnyk on PyPI
Before you install
Low install friction with a pure-Python wheel distribution. Maintenance is dormant—no releases since January 2024 despite a last commit in August 2024, and no updates in nearly 3 years. Suitable for stable, read-heavy workflows but risky for active development against a rapidly evolving API.
Requires a valid Snyk API token; the public Snyk service is the default but a custom instance URL can be provided.
License in practice
MIT license is permissive and imposes no restrictions on use, modification, or redistribution in commercial or private projects.
Quickstart
pip install pysnyk
import pysnyk
client = pysnyk.SnykClient("<your-api-token>")
org = client.organizations.first()
result = org.test_python("flask", "0.12.2")Verify before relying
- Whether the API surface remains compatible with current Snyk API versions given the dormant maintenance status.
- Performance characteristics when handling large dependency graphs or organizations with many projects.
- Support status for Python versions beyond 3.11 or future breaking changes to the Snyk API.
Package facts
| License | MIT permissive |
| Python support | Supports the current Python release >=3.7,<4.0 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 5 packagesrequestsmashumaroimportlib-metadataretrydeprecation |
| Maintenance | Dormant 944 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 268,563 / month, #8,273 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | License :: OSI Approved :: MIT LicenseProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.7Programming Language :: Python :: 3.8Programming Language :: Python :: 3.9 |
Evidence: pysnyk-0.9.19-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “snyk api client python”
- pysnykA Python client library for the Snyk API that enables programmatic…
- ca9ca9 analyzes Python package supply chains to determine whether…
- twentyc.rpcA client library for consuming 20c's RESTful API, built on top of the…
Give your agent the search over MCP, or paste the wish link into any chat.
More Security packages
Provides Python bindings to the FreeDesktop.org Secret Service API for securely storing and retrieving passwords and secrets through GNOME Keyring, KWallet, or KeePassXC.
MSAL for Python handles OAuth2 and OpenID Connect authentication with Microsoft identity services, managing token acquisition, caching, and refresh for applications integrating with Microsoft Entra ID, Microsoft Accounts, and Azure AD B2C.
joserfc implements JOSE standards (JWS, JWE, JWK, JWT, and related RFCs) for signing, encrypting, and managing JSON-based cryptographic tokens in Python.
Authlib provides a complete implementation of OAuth 1.0, OAuth 2.0, and OpenID Connect 1.0 for building both authentication clients and servers, with built-in support for JWS, JWK, JWA, and JWT standards.
Provides low-level CFFI bindings to the official Argon2 password hashing algorithm for use by libraries and applications that need direct access to Argon2 without higher-level abstractions.
ADAL for Python authenticates applications with Azure Active Directory to obtain tokens for accessing Azure AD-protected resources.
Install only if maintaining existing code that already depends on it, and plan a migration.
See also pysentry-rs · safety · nvdlib · pybuildkite · python-gerrit-api · uv-secure · zaproxy · stytch · pip-audit · okta