python-statemachine

Python Finite State Machines made easy.

Latest 3.2.2

PyPIMIT License

86%

Total Score

healthy

Long-running, actively maintained package with strong release evidence, but concentrated maintenance and weak workflow pinning add caution.

Are you affected? Scan for Free

Health Score Breakdown

Project backing

The repository is owned by an individual rather than an organization, so the concentrated recent contribution pattern is not offset by visible organizational backing.

Repo bus factor

One contributor made 87.5% of the 8 recent commits, leaving a concentrated maintenance load and some continuity risk despite a second active contributor.

Security policy

The repository has no security policy. That weakens vulnerability-reporting transparency for a package whose release notes document security fixes.

Workflow audit

All 15 analyzed action references are unpinned, which weakens reproducibility, and the audit found low-confidence cache-poisoning patterns in two workflows. No untrusted checkout or script-injection paths were found, so this is a hygiene caution rather than a severe risk.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-419538 python-statemachine is vulnerable to Uncontrolled Resource Consumption in versions 3.2.0 - 3.2.0.	3.2.0 - 3.2.0	High
AIKIDO-2026-612732 python-statemachine is vulnerable to Path Traversal in versions 3.2.0 - 3.2.0.	3.2.0 - 3.2.0	High
AIKIDO-2026-570897 python-statemachine is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes in versions 3.2.0 - 3.2.0.	3.2.0 - 3.2.0	Critical
CVE-2026-47103 python-statemachine is vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in versions 3.0.0 - 3.2.0.	3.0.0 - 3.2.0	Critical

Package versions

Version	Published	Vulnerabilities
3.2.2	14 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
3.2.1	1 Aug 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
3.2.0	17 Jun 2026	1 1 critical, 3 total 2 2 high, 3 total 0 0 medium, 3 total 0 0 low, 3 total
3.1.2	19 May 2026	1 1 critical, 1 total 0 0 high, 1 total 0 0 medium, 1 total 0 0 low, 1 total
3.1.1	16 May 2026	1 1 critical, 1 total 0 0 high, 1 total 0 0 medium, 1 total 0 0 low, 1 total
3.1.0	15 May 2026	1 1 critical, 1 total 0 0 high, 1 total 0 0 medium, 1 total 0 0 low, 1 total
3.0.0	24 Feb 2026	1 1 critical, 1 total 0 0 high, 1 total 0 0 medium, 1 total 0 0 low, 1 total
2.6.0	13 Feb 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
2.5.0	3 Dec 2024	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
2.4.0	5 Nov 2024	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total