{"url":"https://pypi.sbomify.com/package/ic-candid-parser/0.2.1","markdown_url":"https://pypi.sbomify.com/package/ic-candid-parser/0.2.1.md","name":"ic-candid-parser","version":"0.2.1","purl":"pkg:pypi/ic-candid-parser@0.2.1","summary":"Rust extension for parsing Candid DID files (part of icp-py-core)","author":null,"project_urls":{},"requires_python":">=3.8","license":null,"classifiers":["Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust"],"wheels":[{"filename":"ic_candid_parser-0.2.1-cp38-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/6c/a6/01b72149affee81f09e44f8b82478014d174221bda1904f82f50575a5cba/ic_candid_parser-0.2.1-cp38-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"a3ebab59-2de1-525c-b222-d7fb9aabac7e","path":"ic_candid_parser-0.2.1.dist-info/sboms/ic_candid_parser.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a3ebab59-2de1-525c-b222-d7fb9aabac7e/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eliezhao/icp-py-core","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eliezhao/icp-py-core/.github/workflows/release.yml@refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.10":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eliezhao/icp-py-core","1.3.6.1.4.1.57264.1.13":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.14":"refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.15":"1058532541","1.3.6.1.4.1.57264.1.16":"https://github.com/eliezhao","1.3.6.1.4.1.57264.1.17":"61464021","1.3.6.1.4.1.57264.1.18":"https://github.com/eliezhao/icp-py-core/.github/workflows/release.yml@refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.19":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/eliezhao/icp-py-core/actions/runs/25791815449/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"ic_candid_parser-0.2.1-cp38-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/dd/8f/044351ce57fb6bef0f3658a6366eafabb74ece9f507283895d27609ef4d0/ic_candid_parser-0.2.1-cp38-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"04dfacf7-1556-5c35-91b7-6f7c2d2bb6e5","path":"ic_candid_parser-0.2.1.dist-info/sboms/ic_candid_parser.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/04dfacf7-1556-5c35-91b7-6f7c2d2bb6e5/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eliezhao/icp-py-core","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eliezhao/icp-py-core/.github/workflows/release.yml@refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.10":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eliezhao/icp-py-core","1.3.6.1.4.1.57264.1.13":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.14":"refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.15":"1058532541","1.3.6.1.4.1.57264.1.16":"https://github.com/eliezhao","1.3.6.1.4.1.57264.1.17":"61464021","1.3.6.1.4.1.57264.1.18":"https://github.com/eliezhao/icp-py-core/.github/workflows/release.yml@refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.19":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/eliezhao/icp-py-core/actions/runs/25791815449/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"ic_candid_parser-0.2.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/38/c7/dade6460e382e3273e621c2743509385cceedd1c7e5c5e94a14ea767d73d/ic_candid_parser-0.2.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"2e6e8858-2160-5848-8022-c5123be64fc8","path":"ic_candid_parser-0.2.1.dist-info/sboms/ic_candid_parser.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2e6e8858-2160-5848-8022-c5123be64fc8/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eliezhao/icp-py-core","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eliezhao/icp-py-core/.github/workflows/release.yml@refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.10":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eliezhao/icp-py-core","1.3.6.1.4.1.57264.1.13":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.14":"refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.15":"1058532541","1.3.6.1.4.1.57264.1.16":"https://github.com/eliezhao","1.3.6.1.4.1.57264.1.17":"61464021","1.3.6.1.4.1.57264.1.18":"https://github.com/eliezhao/icp-py-core/.github/workflows/release.yml@refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.19":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/eliezhao/icp-py-core/actions/runs/25791815449/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"ic_candid_parser-0.2.1-cp38-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/34/07/294f22e5a6efee128adcb08418c8fde25b6ed357ed2df62fb089b12d9248/ic_candid_parser-0.2.1-cp38-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"5048678d-caff-536c-a810-20730757cfe0","path":"ic_candid_parser-0.2.1.dist-info/sboms/ic_candid_parser.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5048678d-caff-536c-a810-20730757cfe0/download","vulnerability_count":4,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eliezhao/icp-py-core","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eliezhao/icp-py-core/.github/workflows/release.yml@refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.10":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eliezhao/icp-py-core","1.3.6.1.4.1.57264.1.13":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.14":"refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.15":"1058532541","1.3.6.1.4.1.57264.1.16":"https://github.com/eliezhao","1.3.6.1.4.1.57264.1.17":"61464021","1.3.6.1.4.1.57264.1.18":"https://github.com/eliezhao/icp-py-core/.github/workflows/release.yml@refs/tags/v2.3.1","1.3.6.1.4.1.57264.1.19":"0235bcd52067791d6be8d07dcd016214c228c070","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/eliezhao/icp-py-core/actions/runs/25791815449/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":4,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.27.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["ic_candid_parser-0.2.1-cp38-abi3-macosx_10_12_x86_64.whl","ic_candid_parser-0.2.1-cp38-abi3-macosx_11_0_arm64.whl","ic_candid_parser-0.2.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","ic_candid_parser-0.2.1-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.27.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["ic_candid_parser-0.2.1-cp38-abi3-macosx_10_12_x86_64.whl","ic_candid_parser-0.2.1-cp38-abi3-macosx_11_0_arm64.whl","ic_candid_parser-0.2.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","ic_candid_parser-0.2.1-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.100","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.100","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["ic_candid_parser-0.2.1-cp38-abi3-macosx_10_12_x86_64.whl","ic_candid_parser-0.2.1-cp38-abi3-macosx_11_0_arm64.whl","ic_candid_parser-0.2.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","ic_candid_parser-0.2.1-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["ic_candid_parser-0.2.1-cp38-abi3-macosx_10_12_x86_64.whl","ic_candid_parser-0.2.1-cp38-abi3-macosx_11_0_arm64.whl","ic_candid_parser-0.2.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","ic_candid_parser-0.2.1-cp38-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":4,"total_sboms":4,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"unknown":2}}}