Skip to content

SBOM for jsrun 0.3.0

Modern embedded JavaScript runtime for Python powered by V8 and Rust.

CycloneDX PEP 740 attested 8 known vulnerabilities

Requires Python: >=3.10
PyPI: jsrun 0.3.0
Homepage: https://github.com/imfing/jsrun
Repository: https://github.com/imfing/jsrun

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: imfing/jsrun Workflow: CI.yml

jsrun.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 8 known vulnerabilities

jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl

Attested

Publisher: GitHub Source: imfing/jsrun Workflow: CI.yml

jsrun.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 8 known vulnerabilities

jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl

Attested

Publisher: GitHub Source: imfing/jsrun Workflow: CI.yml

jsrun.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 8 known vulnerabilities

jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl

Attested

Publisher: GitHub Source: imfing/jsrun Workflow: CI.yml

jsrun.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 8 known vulnerabilities

jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl

Attested

Publisher: GitHub Source: imfing/jsrun Workflow: CI.yml

jsrun.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 8 known vulnerabilities

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0176 Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators	High 8.7	pyo3 0.27.1 crates.io	0.29.0
RUSTSEC-2026-0177 Missing `Sync` bound on `PyCFunction::new_closure` closures	Medium 6.3	pyo3 0.27.1 crates.io	0.29.0
RUSTSEC-2026-0190 Unsoundness in `Error::downcast_mut()`	Unknown	anyhow 1.0.100 crates.io	1.0.103
RUSTSEC-2026-0258 h2 unbounded empty DATA frames	Unknown	h2 0.4.12 crates.io	0.4.16
RUSTSEC-2024-0436 paste - no longer maintained	Unknown	paste 1.0.15 crates.io	—
RUSTSEC-2026-0441 `pin-utils` is unmaintained	Unknown	pin-utils 0.1.0 crates.io	—
RUSTSEC-2026-0097 Rand is unsound with a custom logger using `rand::rng()`	Unknown	rand 0.8.5 crates.io	0.8.6
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.48.0 crates.io	1.51.6

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]