{"url":"https://pypi.sbomify.com/package/fontc/1.0.0","markdown_url":"https://pypi.sbomify.com/package/fontc/1.0.0.md","name":"fontc","version":"1.0.0","purl":"pkg:pypi/fontc@1.0.0","summary":"A font compiler written in Rust.","author":null,"project_urls":{},"requires_python":null,"license":null,"classifiers":[],"wheels":[{"filename":"fontc-1.0.0-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/57/a7/abd2c2b93b94fd6ff256c8cbd7d864089f5e12dd7518f59249e0a89c939c/fontc-1.0.0-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"279bbfb5-ad90-512e-ba04-41d8dd8dbd8a","path":"fontc-1.0.0.dist-info/sboms/fontc.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/279bbfb5-ad90-512e-ba04-41d8dd8dbd8a/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"googlefonts/fontc","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.10":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/googlefonts/fontc","1.3.6.1.4.1.57264.1.13":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.14":"refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.15":"564099683","1.3.6.1.4.1.57264.1.16":"https://github.com/googlefonts","1.3.6.1.4.1.57264.1.17":"6466306","1.3.6.1.4.1.57264.1.18":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.19":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/googlefonts/fontc/actions/runs/33522494613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"fontc-1.0.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/0c/45/98ea6a599b9371cfc4f47f30f05feceeb0362eb4da1cc136e2566f61fcce/fontc-1.0.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"6c2093e8-9935-58c0-b38f-c4fcf9dff11f","path":"fontc-1.0.0.dist-info/sboms/fontc.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6c2093e8-9935-58c0-b38f-c4fcf9dff11f/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"googlefonts/fontc","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.10":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/googlefonts/fontc","1.3.6.1.4.1.57264.1.13":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.14":"refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.15":"564099683","1.3.6.1.4.1.57264.1.16":"https://github.com/googlefonts","1.3.6.1.4.1.57264.1.17":"6466306","1.3.6.1.4.1.57264.1.18":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.19":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/googlefonts/fontc/actions/runs/33522494613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"fontc-1.0.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/bf/74/7eaee6710fe00c38de1e7d25bfa45ae1b03092a523aad3d30e1340fb02cb/fontc-1.0.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"f183649f-aadf-591b-9b42-541eca494740","path":"fontc-1.0.0.dist-info/sboms/fontc.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f183649f-aadf-591b-9b42-541eca494740/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"googlefonts/fontc","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.10":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/googlefonts/fontc","1.3.6.1.4.1.57264.1.13":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.14":"refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.15":"564099683","1.3.6.1.4.1.57264.1.16":"https://github.com/googlefonts","1.3.6.1.4.1.57264.1.17":"6466306","1.3.6.1.4.1.57264.1.18":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.19":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/googlefonts/fontc/actions/runs/33522494613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"fontc-1.0.0-py3-none-musllinux_1_1_aarch64.whl","url":"https://files.pythonhosted.org/packages/cd/ec/98a21af1e06cbdce20992a9372e78f2ec8ea8de4059830fed8bcb61a107a/fontc-1.0.0-py3-none-musllinux_1_1_aarch64.whl","sboms":[{"artifact_uuid":"752f905c-718d-5348-9c7f-2bfb5b6962d2","path":"fontc-1.0.0.dist-info/sboms/fontc.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/752f905c-718d-5348-9c7f-2bfb5b6962d2/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"googlefonts/fontc","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.10":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/googlefonts/fontc","1.3.6.1.4.1.57264.1.13":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.14":"refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.15":"564099683","1.3.6.1.4.1.57264.1.16":"https://github.com/googlefonts","1.3.6.1.4.1.57264.1.17":"6466306","1.3.6.1.4.1.57264.1.18":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.19":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/googlefonts/fontc/actions/runs/33522494613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"fontc-1.0.0-py3-none-musllinux_1_1_x86_64.whl","url":"https://files.pythonhosted.org/packages/8f/97/4979595aad8151ad5b57cd044f6e9be791f773c291e82a096a27b2567e96/fontc-1.0.0-py3-none-musllinux_1_1_x86_64.whl","sboms":[{"artifact_uuid":"3dd7b96b-9c10-56f2-9fa2-b9f64b867738","path":"fontc-1.0.0.dist-info/sboms/fontc.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3dd7b96b-9c10-56f2-9fa2-b9f64b867738/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"googlefonts/fontc","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.10":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/googlefonts/fontc","1.3.6.1.4.1.57264.1.13":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.14":"refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.15":"564099683","1.3.6.1.4.1.57264.1.16":"https://github.com/googlefonts","1.3.6.1.4.1.57264.1.17":"6466306","1.3.6.1.4.1.57264.1.18":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.19":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/googlefonts/fontc/actions/runs/33522494613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"fontc-1.0.0-py3-none-win32.whl","url":"https://files.pythonhosted.org/packages/3b/1a/e7da7ca9ca72a0f3562b940631628b89809abfe308eb9514c9138fd92b67/fontc-1.0.0-py3-none-win32.whl","sboms":[{"artifact_uuid":"2de56b2b-59e3-5f19-badc-5a907961d984","path":"fontc-1.0.0.dist-info/sboms/fontc.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2de56b2b-59e3-5f19-badc-5a907961d984/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"googlefonts/fontc","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.10":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/googlefonts/fontc","1.3.6.1.4.1.57264.1.13":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.14":"refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.15":"564099683","1.3.6.1.4.1.57264.1.16":"https://github.com/googlefonts","1.3.6.1.4.1.57264.1.17":"6466306","1.3.6.1.4.1.57264.1.18":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.19":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/googlefonts/fontc/actions/runs/33522494613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"fontc-1.0.0-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/71/81/7627a28f8e2edb2d732d4011218ee6a43787229b0b1e9e1d58c687699938/fontc-1.0.0-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"c622ec51-57c3-5639-9d1b-3fb023a33750","path":"fontc-1.0.0.dist-info/sboms/fontc.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c622ec51-57c3-5639-9d1b-3fb023a33750/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"googlefonts/fontc","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.10":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/googlefonts/fontc","1.3.6.1.4.1.57264.1.13":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.14":"refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.15":"564099683","1.3.6.1.4.1.57264.1.16":"https://github.com/googlefonts","1.3.6.1.4.1.57264.1.17":"6466306","1.3.6.1.4.1.57264.1.18":"https://github.com/googlefonts/fontc/.github/workflows/release.yml@refs/tags/fontc-v1.0.0","1.3.6.1.4.1.57264.1.19":"e62f5818357f796f329f9bc1335c0e14a104ce09","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/googlefonts/fontc/actions/runs/33522494613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":7,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["fontc-1.0.0-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","fontc-1.0.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","fontc-1.0.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","fontc-1.0.0-py3-none-musllinux_1_1_aarch64.whl","fontc-1.0.0-py3-none-musllinux_1_1_x86_64.whl","fontc-1.0.0-py3-none-win32.whl","fontc-1.0.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["fontc-1.0.0-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","fontc-1.0.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","fontc-1.0.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","fontc-1.0.0-py3-none-musllinux_1_1_aarch64.whl","fontc-1.0.0-py3-none-musllinux_1_1_x86_64.whl","fontc-1.0.0-py3-none-win32.whl","fontc-1.0.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2021-0139","aliases":[],"summary":"ansi_term is Unmaintained","severity":"unknown","score":null,"package":"ansi_term","version":"0.12.1","ecosystem":"crates.io","purl":"pkg:cargo/ansi_term@0.12.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2021-0139","wheels":["fontc-1.0.0-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","fontc-1.0.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","fontc-1.0.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","fontc-1.0.0-py3-none-musllinux_1_1_aarch64.whl","fontc-1.0.0-py3-none-musllinux_1_1_x86_64.whl","fontc-1.0.0-py3-none-win32.whl","fontc-1.0.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["fontc-1.0.0-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","fontc-1.0.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","fontc-1.0.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","fontc-1.0.0-py3-none-musllinux_1_1_aarch64.whl","fontc-1.0.0-py3-none-musllinux_1_1_x86_64.whl","fontc-1.0.0-py3-none-win32.whl","fontc-1.0.0-py3-none-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":7,"total_sboms":7,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"unknown":2}}}