{"url":"https://pypi.sbomify.com/package/norfair-rs/0.4.3","markdown_url":"https://pypi.sbomify.com/package/norfair-rs/0.4.3.md","name":"norfair-rs","version":"0.4.3","purl":"pkg:pypi/norfair-rs@0.4.3","summary":"Fast object tracking library - Rust implementation of norfair","author":null,"project_urls":{"Homepage":"https://github.com/nmichlo/norfair-rs","Repository":"https://github.com/nmichlo/norfair-rs"},"requires_python":">=3.12","license":"BSD-3-Clause","classifiers":["License :: OSI Approved :: BSD License","Operating System :: OS Independent","Programming Language :: Python :: 3","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Rust"],"wheels":[{"filename":"norfair_rs-0.4.3-cp312-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/4b/ed/e9d12d374786b9b1198a836860811b774b5055b17b1fb7fd872e452e69e6/norfair_rs-0.4.3-cp312-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"e6c53863-53af-56bf-8b08-666df0f828bb","path":"norfair_rs-0.4.3.dist-info/sboms/norfair-rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e6c53863-53af-56bf-8b08-666df0f828bb/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nmichlo/norfair-rs","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.10":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nmichlo/norfair-rs","1.3.6.1.4.1.57264.1.13":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.15":"1110181878","1.3.6.1.4.1.57264.1.16":"https://github.com/nmichlo","1.3.6.1.4.1.57264.1.17":"30571138","1.3.6.1.4.1.57264.1.18":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.19":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/nmichlo/norfair-rs/actions/runs/26764029134/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"norfair_rs-0.4.3-cp312-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/cc/8d/aa042011450d696205e43d0bdfa8fda38b1f85a8fcc441fc597c48dc6568/norfair_rs-0.4.3-cp312-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"3e55673d-40b5-516b-9da3-d32593cfc883","path":"norfair_rs-0.4.3.dist-info/sboms/norfair-rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3e55673d-40b5-516b-9da3-d32593cfc883/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nmichlo/norfair-rs","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.10":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nmichlo/norfair-rs","1.3.6.1.4.1.57264.1.13":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.15":"1110181878","1.3.6.1.4.1.57264.1.16":"https://github.com/nmichlo","1.3.6.1.4.1.57264.1.17":"30571138","1.3.6.1.4.1.57264.1.18":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.19":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/nmichlo/norfair-rs/actions/runs/26764029134/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"norfair_rs-0.4.3-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/e7/a9/3ff7746e9b6bf2e18b7de169af364e403eb5521d2978cddbdcf787d71b29/norfair_rs-0.4.3-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"c0ee6997-78d9-5c82-b8b1-4f65a839a772","path":"norfair_rs-0.4.3.dist-info/sboms/norfair-rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c0ee6997-78d9-5c82-b8b1-4f65a839a772/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nmichlo/norfair-rs","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.10":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nmichlo/norfair-rs","1.3.6.1.4.1.57264.1.13":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.15":"1110181878","1.3.6.1.4.1.57264.1.16":"https://github.com/nmichlo","1.3.6.1.4.1.57264.1.17":"30571138","1.3.6.1.4.1.57264.1.18":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.19":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/nmichlo/norfair-rs/actions/runs/26764029134/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"norfair_rs-0.4.3-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/f2/ae/90ff1bb3bb37836f674cba30afef82fb89ccdb5eeefaa0dc4ceac4b75d79/norfair_rs-0.4.3-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"7d6f9585-5a84-5d02-92d4-5711ae0b9769","path":"norfair_rs-0.4.3.dist-info/sboms/norfair-rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7d6f9585-5a84-5d02-92d4-5711ae0b9769/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nmichlo/norfair-rs","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.10":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nmichlo/norfair-rs","1.3.6.1.4.1.57264.1.13":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.15":"1110181878","1.3.6.1.4.1.57264.1.16":"https://github.com/nmichlo","1.3.6.1.4.1.57264.1.17":"30571138","1.3.6.1.4.1.57264.1.18":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.19":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/nmichlo/norfair-rs/actions/runs/26764029134/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"norfair_rs-0.4.3-cp312-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/46/91/e37c66c74a0816de5d2c764adb678032afd0306bd1c59c9d88397cf74fca/norfair_rs-0.4.3-cp312-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"d4f4249e-1722-586d-ada7-2239026e2be7","path":"norfair_rs-0.4.3.dist-info/sboms/norfair-rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d4f4249e-1722-586d-ada7-2239026e2be7/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nmichlo/norfair-rs","workflow":"release.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.10":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nmichlo/norfair-rs","1.3.6.1.4.1.57264.1.13":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.15":"1110181878","1.3.6.1.4.1.57264.1.16":"https://github.com/nmichlo","1.3.6.1.4.1.57264.1.17":"30571138","1.3.6.1.4.1.57264.1.18":"https://github.com/nmichlo/norfair-rs/.github/workflows/release.yml@refs/tags/v0.4.3","1.3.6.1.4.1.57264.1.19":"99d0f1d6d46a0becc6e3020598dde296b8317079","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/nmichlo/norfair-rs/actions/runs/26764029134/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.27.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["norfair_rs-0.4.3-cp312-abi3-macosx_10_12_x86_64.whl","norfair_rs-0.4.3-cp312-abi3-macosx_11_0_arm64.whl","norfair_rs-0.4.3-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","norfair_rs-0.4.3-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","norfair_rs-0.4.3-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.27.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["norfair_rs-0.4.3-cp312-abi3-macosx_10_12_x86_64.whl","norfair_rs-0.4.3-cp312-abi3-macosx_11_0_arm64.whl","norfair_rs-0.4.3-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","norfair_rs-0.4.3-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","norfair_rs-0.4.3-cp312-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1}}}