{"url":"https://pypi.sbomify.com/package/measurekit-core/0.1.11","markdown_url":"https://pypi.sbomify.com/package/measurekit-core/0.1.11.md","name":"measurekit-core","version":"0.1.11","purl":"pkg:pypi/measurekit-core@0.1.11","summary":null,"author":null,"project_urls":{"Homepage":"https://github.com/Alexisrx96/measurekit"},"requires_python":">=3.10","license":null,"classifiers":["Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust"],"wheels":[{"filename":"measurekit_core-0.1.11-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/ae/88/8b32dfe5502e4dc6332fb2ac22f1a6eb8ddc16872882e1124947abeff56a/measurekit_core-0.1.11-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"fb3b005b-15f0-52a8-be1a-9c0237e6b50b","path":"measurekit_core-0.1.11.dist-info/sboms/measurekit-core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fb3b005b-15f0-52a8-be1a-9c0237e6b50b/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Alexisrx96/measurekit","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Alexisrx96/measurekit/.github/workflows/release.yml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.10":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Alexisrx96/measurekit","1.3.6.1.4.1.57264.1.13":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.15":"1053851183","1.3.6.1.4.1.57264.1.16":"https://github.com/Alexisrx96","1.3.6.1.4.1.57264.1.17":"54039997","1.3.6.1.4.1.57264.1.18":"https://github.com/Alexisrx96/measurekit/.github/workflows/release.yml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.19":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/Alexisrx96/measurekit/actions/runs/29111075761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/3a/48/33f293dcc2c4222a0239a8b6194d7ff9ec1d4f579bfe51de092bf9a09009/measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"52f9ca50-6be4-5e3f-9d9a-dd4fe4089f00","path":"measurekit_core-0.1.11.dist-info/sboms/measurekit-core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/52f9ca50-6be4-5e3f-9d9a-dd4fe4089f00/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Alexisrx96/measurekit","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Alexisrx96/measurekit/.github/workflows/release.yml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.10":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Alexisrx96/measurekit","1.3.6.1.4.1.57264.1.13":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.15":"1053851183","1.3.6.1.4.1.57264.1.16":"https://github.com/Alexisrx96","1.3.6.1.4.1.57264.1.17":"54039997","1.3.6.1.4.1.57264.1.18":"https://github.com/Alexisrx96/measurekit/.github/workflows/release.yml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.19":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/Alexisrx96/measurekit/actions/runs/29111075761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/13/5d/2afa15dee199ff1d16c13f1ae1ac92bcf21eff429c8019b912cbb6a9e504/measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"709d4eb9-f4f7-5255-9607-493ffae753d0","path":"measurekit_core-0.1.11.dist-info/sboms/measurekit-core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/709d4eb9-f4f7-5255-9607-493ffae753d0/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Alexisrx96/measurekit","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Alexisrx96/measurekit/.github/workflows/release.yml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.10":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Alexisrx96/measurekit","1.3.6.1.4.1.57264.1.13":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.15":"1053851183","1.3.6.1.4.1.57264.1.16":"https://github.com/Alexisrx96","1.3.6.1.4.1.57264.1.17":"54039997","1.3.6.1.4.1.57264.1.18":"https://github.com/Alexisrx96/measurekit/.github/workflows/release.yml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.19":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/Alexisrx96/measurekit/actions/runs/29111075761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"measurekit_core-0.1.11-cp310-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/45/d4/4c4748de2dd94458a5e49b4d1a56eb054bbcf0e9afdaf68c1ad3ff47524b/measurekit_core-0.1.11-cp310-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"65d34311-3360-5085-b1ab-26b2b172edaf","path":"measurekit_core-0.1.11.dist-info/sboms/measurekit-core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/65d34311-3360-5085-b1ab-26b2b172edaf/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Alexisrx96/measurekit","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Alexisrx96/measurekit/.github/workflows/release.yml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.10":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Alexisrx96/measurekit","1.3.6.1.4.1.57264.1.13":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.15":"1053851183","1.3.6.1.4.1.57264.1.16":"https://github.com/Alexisrx96","1.3.6.1.4.1.57264.1.17":"54039997","1.3.6.1.4.1.57264.1.18":"https://github.com/Alexisrx96/measurekit/.github/workflows/release.yml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.19":"f439827f28fe792f5f1e7e466f839a6279f4c3af","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/Alexisrx96/measurekit/actions/runs/29111075761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":4,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.25.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["measurekit_core-0.1.11-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","measurekit_core-0.1.11-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.25.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["measurekit_core-0.1.11-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","measurekit_core-0.1.11-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2026-25541","aliases":["GHSA-434x-w66g-qw3r","RUSTSEC-2026-0007"],"summary":"Integer overflow in `BytesMut::reserve`","severity":"medium","score":5.5,"package":"bytes","version":"1.11.0","ecosystem":"crates.io","purl":"pkg:cargo/bytes@1.11.0","fixed":["1.11.1"],"url":"https://insights.sbomify.com/CVE-2026-25541/","wheels":["measurekit_core-0.1.11-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","measurekit_core-0.1.11-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2026-111959","aliases":["GHSA-gqmm-qrjq-4c7h","RUSTSEC-2026-0442"],"summary":"Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads","severity":"unknown","score":null,"package":"arrow-data","version":"53.4.1","ecosystem":"crates.io","purl":"pkg:cargo/arrow-data@53.4.1","fixed":["57.3.2"],"url":"https://insights.sbomify.com/CVE-2026-111959/","wheels":["measurekit_core-0.1.11-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","measurekit_core-0.1.11-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["measurekit_core-0.1.11-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","measurekit_core-0.1.11-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["measurekit_core-0.1.11-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","measurekit_core-0.1.11-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["measurekit_core-0.1.11-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","measurekit_core-0.1.11-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","measurekit_core-0.1.11-cp310-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":4,"total_sboms":4,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":2,"unknown":4}}}