{"url":"https://pypi.sbomify.com/package/flm-citations/0.3.1","markdown_url":"https://pypi.sbomify.com/package/flm-citations/0.3.1.md","name":"flm-citations","version":"0.3.1","purl":"pkg:pypi/flm-citations@0.3.1","summary":"Support for citations in FLM (see flm-core package)","author":"Philippe Faist","project_urls":{"Homepage":"https://github.com/phfaist/flm-citations"},"requires_python":">=3.10","license":null,"classifiers":["Programming Language :: Python :: 3","Programming Language :: Rust","Topic :: Text Processing :: Markup"],"wheels":[{"filename":"flm_citations-0.3.1-cp39-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/80/bb/554a69a2cfa8f013a977b1b8cf6a0f60ebe5a9887560ea91a5e053edc226/flm_citations-0.3.1-cp39-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"2fe8c84c-1cde-5cf1-869f-112d4a9ba6bf","path":"flm_citations-0.3.1.dist-info/sboms/flm-citations-autocitefetch.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2fe8c84c-1cde-5cf1-869f-112d4a9ba6bf/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"phfaist/flm-citations","workflow":"build-wheels.yml","environment":"env-deploy-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/phfaist/flm-citations","1.3.6.1.4.1.57264.1.13":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"530302975","1.3.6.1.4.1.57264.1.16":"https://github.com/phfaist","1.3.6.1.4.1.57264.1.17":"2291140","1.3.6.1.4.1.57264.1.18":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/phfaist/flm-citations/actions/runs/36548311485/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"flm_citations-0.3.1-cp39-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/90/94/68723e490af7ebbf903b17e0956669fc09104b7b9a8f5654ecfb56b217e9/flm_citations-0.3.1-cp39-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"0749e46f-19f0-5e0a-8a7d-e2c200e7ed08","path":"flm_citations-0.3.1.dist-info/sboms/flm-citations-autocitefetch.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0749e46f-19f0-5e0a-8a7d-e2c200e7ed08/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"phfaist/flm-citations","workflow":"build-wheels.yml","environment":"env-deploy-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/phfaist/flm-citations","1.3.6.1.4.1.57264.1.13":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"530302975","1.3.6.1.4.1.57264.1.16":"https://github.com/phfaist","1.3.6.1.4.1.57264.1.17":"2291140","1.3.6.1.4.1.57264.1.18":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/phfaist/flm-citations/actions/runs/36548311485/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"flm_citations-0.3.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/04/a5/edf2640b03f31c8ef843ed9580e5f4477e014489a3f6077d1e65deee372b/flm_citations-0.3.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"b7fa07cf-638e-5208-ac0e-0c943eea65bb","path":"flm_citations-0.3.1.dist-info/sboms/flm-citations-autocitefetch.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b7fa07cf-638e-5208-ac0e-0c943eea65bb/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"phfaist/flm-citations","workflow":"build-wheels.yml","environment":"env-deploy-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/phfaist/flm-citations","1.3.6.1.4.1.57264.1.13":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"530302975","1.3.6.1.4.1.57264.1.16":"https://github.com/phfaist","1.3.6.1.4.1.57264.1.17":"2291140","1.3.6.1.4.1.57264.1.18":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/phfaist/flm-citations/actions/runs/36548311485/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"flm_citations-0.3.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/f6/91/7da16966f7811b4b6b7b802949c98baf01691fbb492279e0ec88b8a79dc8/flm_citations-0.3.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"03fa28af-e616-5aeb-91ec-521a8c9ea35a","path":"flm_citations-0.3.1.dist-info/sboms/flm-citations-autocitefetch.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/03fa28af-e616-5aeb-91ec-521a8c9ea35a/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"phfaist/flm-citations","workflow":"build-wheels.yml","environment":"env-deploy-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/phfaist/flm-citations","1.3.6.1.4.1.57264.1.13":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"530302975","1.3.6.1.4.1.57264.1.16":"https://github.com/phfaist","1.3.6.1.4.1.57264.1.17":"2291140","1.3.6.1.4.1.57264.1.18":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/phfaist/flm-citations/actions/runs/36548311485/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"flm_citations-0.3.1-cp39-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/1c/1d/fbe69b7159930bcb74ec0e79d8de71991f4fe3c40e5732b934e36e843dc8/flm_citations-0.3.1-cp39-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"f239dd4c-b684-5011-b0a7-f1afebe7378f","path":"flm_citations-0.3.1.dist-info/sboms/flm-citations-autocitefetch.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f239dd4c-b684-5011-b0a7-f1afebe7378f/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"phfaist/flm-citations","workflow":"build-wheels.yml","environment":"env-deploy-pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/phfaist/flm-citations","1.3.6.1.4.1.57264.1.13":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"530302975","1.3.6.1.4.1.57264.1.16":"https://github.com/phfaist","1.3.6.1.4.1.57264.1.17":"2291140","1.3.6.1.4.1.57264.1.18":"https://github.com/phfaist/flm-citations/.github/workflows/build-wheels.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"ec7297cfcfde42d3f5e81fdfb9398b49c1635327","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/phfaist/flm-citations/actions/runs/36548311485/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":true,"vulnerabilities":[{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.42","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.42","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["flm_citations-0.3.1-cp39-abi3-macosx_10_12_x86_64.whl","flm_citations-0.3.1-cp39-abi3-macosx_11_0_arm64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","flm_citations-0.3.1-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.42","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.42","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["flm_citations-0.3.1-cp39-abi3-macosx_10_12_x86_64.whl","flm_citations-0.3.1-cp39-abi3-macosx_11_0_arm64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","flm_citations-0.3.1-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.42","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.42","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["flm_citations-0.3.1-cp39-abi3-macosx_10_12_x86_64.whl","flm_citations-0.3.1-cp39-abi3-macosx_11_0_arm64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","flm_citations-0.3.1-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.42","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.42","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["flm_citations-0.3.1-cp39-abi3-macosx_10_12_x86_64.whl","flm_citations-0.3.1-cp39-abi3-macosx_11_0_arm64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","flm_citations-0.3.1-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["flm_citations-0.3.1-cp39-abi3-macosx_10_12_x86_64.whl","flm_citations-0.3.1-cp39-abi3-macosx_11_0_arm64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","flm_citations-0.3.1-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["flm_citations-0.3.1-cp39-abi3-macosx_10_12_x86_64.whl","flm_citations-0.3.1-cp39-abi3-macosx_11_0_arm64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","flm_citations-0.3.1-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.9","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.9","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["flm_citations-0.3.1-cp39-abi3-macosx_10_12_x86_64.whl","flm_citations-0.3.1-cp39-abi3-macosx_11_0_arm64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","flm_citations-0.3.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","flm_citations-0.3.1-cp39-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"medium":2,"low":2,"unknown":3}}}