{"url":"https://pypi.sbomify.com/package/metadata-crawler/2610.0.0","markdown_url":"https://pypi.sbomify.com/package/metadata-crawler/2610.0.0.md","name":"metadata-crawler","version":"2610.0.0","purl":"pkg:pypi/metadata-crawler@2610.0.0","summary":"Crawl, extract and push climate metadata for indexing.","author":null,"project_urls":{"Documentation":"https://metadata-crawler.readthedocs.io","Home":"https://github.com/freva-org/metadata-crawler","Issues":"https://github.com/freva-org/metadata-crawler/issues","Source":"https://github.com/freva-org/metadata-crawler"},"requires_python":">=3.11","license":null,"classifiers":["Development Status :: 5 - Production/Stable","Environment :: Console","Intended Audience :: Developers","Intended Audience :: Science/Research","License :: OSI Approved :: BSD License","Operating System :: POSIX :: Linux","Programming Language :: Python :: 3","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Rust"],"wheels":[{"filename":"metadata_crawler-2610.0.0-cp311-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/0e/47/49b66bb6d1989a97f6d1668c5f92503cea2f204af20df1b86b30f66d69c9/metadata_crawler-2610.0.0-cp311-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"f74278b1-f075-52b2-a5be-539ce1045c6e","path":"metadata_crawler-2610.0.0.dist-info/sboms/metadata_crawler.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f74278b1-f075-52b2-a5be-539ce1045c6e/download","vulnerability_count":5,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/f3/40/b2404affa921064e41cb86bd63e87b4ba856a971881eddcad1b6c295af70/metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"fe8342a9-0ba1-51a0-a85d-d757dc25cb15","path":"metadata_crawler-2610.0.0.dist-info/sboms/metadata_crawler.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fe8342a9-0ba1-51a0-a85d-d757dc25cb15/download","vulnerability_count":5,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/eb/ba/287e2393069590d443684808c7e6279ab943b405a62583adafaa5dda3562/metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"2712eb21-3531-5b50-be17-be4d19644d71","path":"metadata_crawler-2610.0.0.dist-info/sboms/metadata_crawler.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2712eb21-3531-5b50-be17-be4d19644d71/download","vulnerability_count":5,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"metadata_crawler-2610.0.0-cp311-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/fc/8f/90d68414910d4408d22bf53e7c15d2ed7c8baa4a7cd78cfba090ef96a5f5/metadata_crawler-2610.0.0-cp311-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"b52c10d9-5a45-5a1b-9ee1-efff8eb02f8e","path":"metadata_crawler-2610.0.0.dist-info/sboms/metadata_crawler.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b52c10d9-5a45-5a1b-9ee1-efff8eb02f8e/download","vulnerability_count":5,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":4,"has_attestation":false,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.20.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.20.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["metadata_crawler-2610.0.0-cp311-abi3-macosx_11_0_arm64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","metadata_crawler-2610.0.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.20.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.20.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["metadata_crawler-2610.0.0-cp311-abi3-macosx_11_0_arm64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","metadata_crawler-2610.0.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.20.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.20.3","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["metadata_crawler-2610.0.0-cp311-abi3-macosx_11_0_arm64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","metadata_crawler-2610.0.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["metadata_crawler-2610.0.0-cp311-abi3-macosx_11_0_arm64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","metadata_crawler-2610.0.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.48.0","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.48.0","fixed":["1.51.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["metadata_crawler-2610.0.0-cp311-abi3-macosx_11_0_arm64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","metadata_crawler-2610.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","metadata_crawler-2610.0.0-cp311-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":4,"total_sboms":4,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"low":1,"unknown":2}}}