Urllib3 entered the "Billion-a-Month" club in 2025

Good blog post re: this essential Python component and CVEs this past year.

urllib3 got started in 2007 IIRC when we moved an internal package index to HTTPS and realized that Python did not have HTTPS handling, and then we realized that Python did not have HTTP redirect handing. And so urllib3!

cgi.escape was added later too.