pip security_warning ai_generated true

WARNING: The candidate selected for download or install is a yanked version

ID: pip/yanked-version-warning

Also available as: JSON · Markdown
88%Fix Rate
88%Confidence
50Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
24 active — — —

Root Cause

Package version was yanked (recalled) from PyPI. Usually has a critical bug or security issue.

generic

Workarounds

  1. 95% success Install a different version: pip install 'pkg!=yanked_version' 
    pip install 'pkg!=yanked_version'

    Sources: https://pip.pypa.io/en/stable/topics/yanked/

  2. 90% success Check PyPI for the reason it was yanked and the recommended replacement version 
    Check PyPI for the reason it was yanked and the recommended replacement version

    Sources: https://pypi.org/

  3. 88% success Update to the latest non-yanked version: pip install --upgrade pkg 
    pip install --upgrade pkg

    Sources: https://pip.pypa.io/en/stable/cli/pip_install/

Dead Ends

Common approaches that don't work:

  1. Pin to the yanked version to suppress the warning 80% fail

    The version was yanked for a reason — likely has a serious issue

  2. Ignore the warning 75% fail

    You may be installing a broken or vulnerable version

Error Chain

Frequently confused with: