--- id: pysnyk version: "0.9.19" license: MIT license_treatment: permissive maintenance: dormant --- # pysnyk — A Python client for the Snyk API License: permissive · Maintenance: dormant · Downloads: 268.6K/mo ## What it is and what it does pysnyk is a Python wrapper around the Snyk vulnerability assessment API. It provides object-oriented access to Snyk organizations, projects, dependencies, and vulnerability data, allowing you to programmatically query security information about packages across multiple ecosystems and manage Snyk projects. The library abstracts the REST API behind manager objects and model classes, so you work with structured objects rather than raw HTTP calls. You can test individual packages for known vulnerabilities, scan entire dependency manifests, retrieve project settings, and manage tags and integrations—all authenticated via an API token. It depends on requests for HTTP, mashumaro for serialization, and retry for fault tolerance. Use it for: - Automate vulnerability scanning of dependencies in CI/CD pipelines by testing manifests or individual package versions. - Bulk-query vulnerability data for dependencies across multiple organizations and projects programmatically. - Integrate security assessments into custom dashboards or reporting tools that need structured access to project and vulnerability metadata. - Test manifests from multiple package managers as part of a unified security audit workflow. - Manage project metadata—tags, settings, and organization membership—via automation rather than manual UI interaction. ## Worth the install? AI-flagged interpretation of the facts above — verify before relying. A Python client library for the Snyk API that enables programmatic vulnerability assessment, project management, and dependency testing across multiple package ecosystems. Yes, if you need programmatic access to the Snyk API and can tolerate dormant maintenance. The library is stable and dependency-light, with no known vulnerabilities and broad Python version support (3.7 through 3.11). However, verify that the API surface matches your target Snyk instance version, and monitor for breaking changes that this client may not track. Not recommended for projects requiring active upstream support or frequent API updates. ## Install pip install pysnyk uv add pysnyk poetry add pysnyk ## Installing pysnyk Before you install: Low install friction with a pure-Python wheel distribution. Maintenance is dormant—no releases since January 2024 despite a last commit in August 2024, and no updates in nearly 3 years. Suitable for stable, read-heavy workflows but risky for active development against a rapidly evolving API. License in practice: MIT license is permissive and imposes no restrictions on use, modification, or redistribution in commercial or private projects. Quickstart: pip install pysnyk import pysnyk client = pysnyk.SnykClient("") org = client.organizations.first() result = org.test_python("flask", "0.12.2") Requires a valid Snyk API token; the public Snyk service is the default but a custom instance URL can be provided. Verify before relying: - Whether the API surface remains compatible with current Snyk API versions given the dormant maintenance status. - Performance characteristics when handling large dependency graphs or organizations with many projects. - Support status for Python versions beyond 3.11 or future breaking changes to the Snyk API. ## Package facts - License: MIT (permissive) - Python support: supports_current - Install friction: low - Maintenance: dormant - Downloads: 268.6K/month (top 15,000 on PyPI) - Known vulnerabilities: none known ## Tags snyk api client python, vulnerability scanning sdk, dependency testing library, snyk project management, security assessment automation, package vulnerability checker, snyk integration python, vulnerability-scanning, api-client, security-automation [View on SkillFed](https://skillfed.io/packages/pysnyk) · [View on PyPI](https://pypi.org/project/pysnyk/)