nltk
Natural Language Toolkit
Why this rank:Strong adoptionRecent releaseHealthy release cadence
Description
The Natural Language Toolkit (NLTK) is a Python package for natural language processing. NLTK requires Python 3.10, 3.11, 3.12, 3.13, or 3.14.
Release History
| Version | Changes | Urgency | Date |
|---|---|---|---|
| v3.10.4 | Version 3.10.4 2026-10-20 This release routes every file path, archive, download, URL fetch and external program through one sandbox that keeps reads and writes inside the trusted data directories, refuses path traversal, symlink escapes and decompression bombs, blocks requests to internal network addresses, and runs Java and other third-party tools only from trusted absolute locations with validated options and input. Pickled models now load through a restricted unpickler, XML and JSON parsing | High | 10/21/2026 |
| v3.10.4-rc1 | Version 3.10.4 (unreleased) This release routes every file path, archive, download, URL fetch and external program through one sandbox that keeps reads and writes inside the trusted data directories, refuses path traversal, symlink escapes and decompression bombs, blocks requests to internal network addresses, and runs Java and other third-party tools only from trusted absolute locations with validated options and input. Pickled models now load through a restricted unpickler, XML and JSON parsi | High | 10/20/2026 |
| v3.10.3 | Version 3.10.3 2026-08-12 * docs: wrap Chat-80 HOWTO output * Sandbox Stanford JAR execution to nltk_data directories * Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377) * Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400) * Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835) * fix(security): sandbox MaltParser's Java execu | High | 8/13/2026 |
| v3.10.2 | Version 3.10.2 2026-08-05 * Remove inisec.py and document PYTHONSAFEPATH instead * Skip draft step in release workflow * Fix symlink escape in FramenetCorpusReader (CWE-59) * Guard tempfile.gettempdir() when building pathsec allowed roots * add tests for transitive_closure Thanks to the following contributors to 3.10.2: Litesh Ghute, Eric Kafe, Evan Kiefer, tarann26 and Rav Singh Chandan | High | 8/5/2026 |
| v3.10.1-rc1 | ## What's Changed * Fix perfect-agreement edge cases in agreement metrics by @Muhtasim-Munif-Fahim in https://github.com/nltk/nltk/pull/3608 * fix(security): prevent ReDoS in TextTilingTokenizer paragraph-break regex (CWE-1333) by @LinZiyuu in https://github.com/nltk/nltk/pull/3612 * fix(security): prevent ReDoS in SensevalCorpusReader _fixXML (CWE-400) by @LinZiyuu in https://github.com/nltk/nltk/pull/3614 * fix(security): resolve relative MaltParser dir via MALT_PARSER, not the CWD (CWE-42 | High | 7/27/2026 |
| v3.10.0-rc1 | ## What's Changed * CHILDES corpus reader: lazy loading (fixes #1340) by @nschneid in https://github.com/nltk/nltk/pull/1341 * Stanseg by @casperlehmann in https://github.com/nltk/nltk/pull/1350 * Add optional CCG semantics computation by @tanin47 in https://github.com/nltk/nltk/pull/1321 * address of free software foundation updated by @Lightyagami1 in https://github.com/nltk/nltk/pull/1347 * Added a verification for empty tokens by @gnardari in https://github.com/nltk/nltk/pull/1353 * us | High | 6/11/2026 |
| develop@2026-06-06 | Latest activity on develop branch | High | 6/6/2026 |
| 3.9.4 | Imported from PyPI (3.9.4) | Low | 4/21/2026 |
| 3.9.3 | Tag 3.9.3 | Low | 2/24/2026 |
| v3.9.2 | Tag v3.9.2 | Low | 10/1/2025 |
| 3.9.2 | Tag 3.9.2 | Low | 10/1/2025 |
| 3.9.1 | Tag 3.9.1 | Low | 8/18/2024 |
| 3.9 | Tag 3.9 | Low | 8/18/2024 |
| 3.8.2 | Tag 3.8.2 | Low | 8/9/2024 |
| 3.8.1 | Tag 3.8.1 | Low | 1/2/2023 |
| 3.8 | Tag 3.8 | Low | 12/12/2022 |
| 3.7 | Tag 3.7 | Low | 2/9/2022 |
| 3.6.7 | Tag 3.6.7 | Low | 12/28/2021 |
| 3.6.6 | Tag 3.6.6 | Low | 12/21/2021 |
| 3.6.5 | Tag 3.6.5 | Low | 10/11/2021 |
| 3.6.4 | Tag 3.6.4 | Low | 10/1/2021 |
| 3.6.3 | Tag 3.6.3 | Low | 9/19/2021 |
| 3.6.2 | Tag 3.6.2 | Low | 4/20/2021 |
| 3.6.1 | Tag 3.6.1 | Low | 4/7/2021 |
| 3.6 | Tag 3.6 | Low | 4/7/2021 |
| 3.5 | Tag 3.5 | Low | 4/12/2020 |
| 3.5b1 | Tag 3.5b1 | Low | 3/8/2020 |
Dependencies & License Audit
Loading dependencies...
Similar Packages
More in RAG & Memory
apache-tvm-ffitvm ffi
generative-ai-for-beginners21 Lessons, Get Started Building with Generative AI
ultralyticsUltralytics YOLO đ for SOTA object detection, multi-object tracking, instance segmentation, pose estimation and image classification.
typescript-sdkThe official TypeScript SDK for Model Context Protocol servers and clients