pip-audit

Also known as
pip-audit

Available worldwide

What is pip-audit?

Scans Python environments and dependency files against multiple vulnerability databases to detect insecure packages, and can automatically upgrade them to secure versions.

Independently observed

pip-audit pricing

We don't have pip-audit's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.

Platform & deployment

Independently observed
Platforms
  • CLI
Deployment
  • Self-hosted

Integrations (4)

Independently observed
  • PyPI
  • OSV (Open Source Vulnerabilities)
  • ESMS
  • GitHub Actions

pip-audit alternatives

Other dependency management we track, ranked by the same independent score.

All pip-audit alternatives, ranked →

Compare pip-audit

Side by side against other dependency management, attribute by attribute, with a source on every value.

Independent · unbought · dated

The Vioscale score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for pip-audit, not the verdict.

Balanced composite 49 / 100
low · 26%updating
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Price level1000.055.2
Release cadence830.054.3
Security score840.043.5
Development activity350.093.3
Pricing transparency250.082.1
Integrations200.091.9
Stars590.031.5
Reliability00.070.0-
Capabilities00.080.0-
Dependent projects00.060.0-
Security posture00.070.0-
Package downloads00.140.0-
Developer Q&A activity00.060.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Activity

AttributeValueEvidence
Commits last 30d12mediumsource · 2026-08-26 · 65%

Adoption

AttributeValueEvidence
Github stars1,354highsource · 2026-08-26 · 90%

Integrations

AttributeValueEvidence
Count4mediumsource · 2026-08-18 · 60%

Language

AttributeValueEvidence
PrimaryPythonhighsource · 2026-08-26 · 90%

License

AttributeValueEvidence
SpdxApache-2.0highsource · 2026-08-26 · 95%

Market

AttributeValueEvidence
AvailabilityPrimaryMarkets: … · AvailabilityScope: global · AvailableCountries: … · NotAvailableCountries: …highsource · 2026-08-18 · 75%

Pricing

AttributeValueEvidence
Free tierYesmediumsource · 2026-08-18 · 60%
Price levelfreemediumsource · 2026-08-18 · 60%
Modelcommerciallowsource · 2026-08-26 · 40%

Release

AttributeValueEvidence
Cadence days31mediumsource · 2026-08-26 · 70%
History20 itemsmediumsource · 2026-08-26 · 70%

Security

AttributeValueEvidence
Scorecard8.4highsource · 2026-08-26 · 90%