{"url":"https://pypi.sbomify.com/package/jsrun/0.3.0","markdown_url":"https://pypi.sbomify.com/package/jsrun/0.3.0.md","name":"jsrun","version":"0.3.0","purl":"pkg:pypi/jsrun@0.3.0","summary":"Modern embedded JavaScript runtime for Python powered by V8 and Rust.","author":null,"project_urls":{"Homepage":"https://github.com/imfing/jsrun","Repository":"https://github.com/imfing/jsrun"},"requires_python":">=3.10","license":null,"classifiers":["Intended Audience :: Developers","License :: OSI Approved :: MIT License","Operating System :: MacOS","Operating System :: POSIX :: Linux","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Rust","Topic :: Software Development :: Libraries :: Python Modules","Typing :: Typed"],"wheels":[{"filename":"jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/0e/2b/3d65eabba13e5cb58366d8c3a3bd8d506ce73f4bdb0b866a1784bf981c2a/jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"e9f8705f-8b46-50bb-9470-50a8646f74f6","path":"jsrun-0.3.0.dist-info/sboms/jsrun.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e9f8705f-8b46-50bb-9470-50a8646f74f6/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"imfing/jsrun","workflow":"CI.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.10":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/imfing/jsrun","1.3.6.1.4.1.57264.1.13":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.15":"1087656445","1.3.6.1.4.1.57264.1.16":"https://github.com/imfing","1.3.6.1.4.1.57264.1.17":"5097752","1.3.6.1.4.1.57264.1.18":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.19":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/imfing/jsrun/actions/runs/37126146600/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/db/54/172b67aeff90c4e3ac7087458b9190920fa0aacfee2c3dae4a80639e8cd0/jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"eb874982-f1cd-506e-9fa7-3a1b14179137","path":"jsrun-0.3.0.dist-info/sboms/jsrun.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/eb874982-f1cd-506e-9fa7-3a1b14179137/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"imfing/jsrun","workflow":"CI.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.10":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/imfing/jsrun","1.3.6.1.4.1.57264.1.13":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.15":"1087656445","1.3.6.1.4.1.57264.1.16":"https://github.com/imfing","1.3.6.1.4.1.57264.1.17":"5097752","1.3.6.1.4.1.57264.1.18":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.19":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/imfing/jsrun/actions/runs/37126146600/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/d6/68/931694a2ae2acaa7a21731d9a157a20612138cab59e22a4e973ca50fbb2b/jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"8a79b5ab-0404-50aa-879b-59469f28582f","path":"jsrun-0.3.0.dist-info/sboms/jsrun.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8a79b5ab-0404-50aa-879b-59469f28582f/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"imfing/jsrun","workflow":"CI.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.10":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/imfing/jsrun","1.3.6.1.4.1.57264.1.13":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.15":"1087656445","1.3.6.1.4.1.57264.1.16":"https://github.com/imfing","1.3.6.1.4.1.57264.1.17":"5097752","1.3.6.1.4.1.57264.1.18":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.19":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/imfing/jsrun/actions/runs/37126146600/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/76/2d/2ad89e2c48b74a74d6395bc0201339c53c4e4db53df5216337fda2373362/jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"823fe0d4-e6e2-5d1d-87ab-1b0f9e17aac8","path":"jsrun-0.3.0.dist-info/sboms/jsrun.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/823fe0d4-e6e2-5d1d-87ab-1b0f9e17aac8/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"imfing/jsrun","workflow":"CI.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.10":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/imfing/jsrun","1.3.6.1.4.1.57264.1.13":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.15":"1087656445","1.3.6.1.4.1.57264.1.16":"https://github.com/imfing","1.3.6.1.4.1.57264.1.17":"5097752","1.3.6.1.4.1.57264.1.18":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.19":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/imfing/jsrun/actions/runs/37126146600/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/d7/5e/c09e91dd06428da4c28bd693fbf83620b55e4ace32d212dcb17e04beb0bd/jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"568a5361-b433-51a6-8521-ecc03e0b2b27","path":"jsrun-0.3.0.dist-info/sboms/jsrun.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/568a5361-b433-51a6-8521-ecc03e0b2b27/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"imfing/jsrun","workflow":"CI.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.10":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/imfing/jsrun","1.3.6.1.4.1.57264.1.13":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.15":"1087656445","1.3.6.1.4.1.57264.1.16":"https://github.com/imfing","1.3.6.1.4.1.57264.1.17":"5097752","1.3.6.1.4.1.57264.1.18":"https://github.com/imfing/jsrun/.github/workflows/CI.yml@refs/tags/v0.3.0","1.3.6.1.4.1.57264.1.19":"42db9849ea347113ea7365c2cda5afd8ede97a11","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/imfing/jsrun/actions/runs/37126146600/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.27.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.27.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.100","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.100","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.4.12","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.4.12","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.48.0","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.48.0","fixed":["1.51.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["jsrun-0.3.0-cp310-abi3-macosx_11_0_arm64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_aarch64.whl","jsrun-0.3.0-cp310-abi3-manylinux_2_28_x86_64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_aarch64.whl","jsrun-0.3.0-cp310-abi3-musllinux_1_2_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"unknown":6}}}