{"url":"https://pypi.sbomify.com/package/npl/3.1.0","markdown_url":"https://pypi.sbomify.com/package/npl/3.1.0.md","name":"npl","version":"3.1.0","purl":"pkg:pypi/npl@3.1.0","summary":"NanoParticleLibrary: structural and chemical-ordering analysis and optimization of nanoparticles","author":"Konstantin M. Neyman, Albert Bruix","project_urls":{"Documentation":"https://nplib.readthedocs.io","Homepage":"https://github.com/farrisric/npl","Issues":"https://github.com/farrisric/npl/issues"},"requires_python":">=3.10","license":null,"classifiers":[],"wheels":[{"filename":"npl-3.1.0-cp310-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/9f/8e/87ec903d1e52430ef564e24bfd98f3371839fdc9758f7dff3dcf5598324c/npl-3.1.0-cp310-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"ab775ad3-5966-5515-8396-29c1f5ac09f5","path":"npl-3.1.0.dist-info/sboms/npl_act_rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ab775ad3-5966-5515-8396-29c1f5ac09f5/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"farrisric/npl","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/farrisric/npl","1.3.6.1.4.1.57264.1.13":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"549641845","1.3.6.1.4.1.57264.1.16":"https://github.com/farrisric","1.3.6.1.4.1.57264.1.17":"61943289","1.3.6.1.4.1.57264.1.18":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/farrisric/npl/actions/runs/42227706675/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"npl-3.1.0-cp310-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/3c/1d/e04a8ae4aa891683b8bd7e353b1c0681d67097071c4c57febcca26ae92a0/npl-3.1.0-cp310-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"2225ee72-352b-56a8-9442-ef2734571dde","path":"npl-3.1.0.dist-info/sboms/npl_act_rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2225ee72-352b-56a8-9442-ef2734571dde/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"farrisric/npl","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/farrisric/npl","1.3.6.1.4.1.57264.1.13":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"549641845","1.3.6.1.4.1.57264.1.16":"https://github.com/farrisric","1.3.6.1.4.1.57264.1.17":"61943289","1.3.6.1.4.1.57264.1.18":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/farrisric/npl/actions/runs/42227706675/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"npl-3.1.0-cp310-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/5f/5b/16307d4fe9306a905c1c4784cd4cea9675b350073964144defeef478b453/npl-3.1.0-cp310-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"786f21b5-3f85-500e-83a4-c1d9a8a6b1f6","path":"npl-3.1.0.dist-info/sboms/npl_act_rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/786f21b5-3f85-500e-83a4-c1d9a8a6b1f6/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"farrisric/npl","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/farrisric/npl","1.3.6.1.4.1.57264.1.13":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"549641845","1.3.6.1.4.1.57264.1.16":"https://github.com/farrisric","1.3.6.1.4.1.57264.1.17":"61943289","1.3.6.1.4.1.57264.1.18":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/farrisric/npl/actions/runs/42227706675/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"npl-3.1.0-cp310-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/a9/f8/0ae367903414fee3eb92c12b8721e50d42de85c8b25f7dd97c47c770bf89/npl-3.1.0-cp310-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"a488275e-884c-546d-b743-813f457125c7","path":"npl-3.1.0.dist-info/sboms/npl_act_rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a488275e-884c-546d-b743-813f457125c7/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"farrisric/npl","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/farrisric/npl","1.3.6.1.4.1.57264.1.13":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"549641845","1.3.6.1.4.1.57264.1.16":"https://github.com/farrisric","1.3.6.1.4.1.57264.1.17":"61943289","1.3.6.1.4.1.57264.1.18":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/farrisric/npl/actions/runs/42227706675/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"npl-3.1.0-cp310-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/d2/99/1b75afeadc7872928ccb370baa3244c8d4b0c0ba1625131975fb927ab4cd/npl-3.1.0-cp310-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"dda8093e-daa2-582a-897f-8c033ea3967e","path":"npl-3.1.0.dist-info/sboms/npl_act_rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/dda8093e-daa2-582a-897f-8c033ea3967e/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"farrisric/npl","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/farrisric/npl","1.3.6.1.4.1.57264.1.13":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"549641845","1.3.6.1.4.1.57264.1.16":"https://github.com/farrisric","1.3.6.1.4.1.57264.1.17":"61943289","1.3.6.1.4.1.57264.1.18":"https://github.com/farrisric/npl/.github/workflows/publish.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"bb8ad7d1ab1c5c84317ce8aa729aac7903e7c2d9","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/farrisric/npl/actions/runs/42227706675/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":true,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["npl-3.1.0-cp310-abi3-macosx_10_12_x86_64.whl","npl-3.1.0-cp310-abi3-macosx_11_0_arm64.whl","npl-3.1.0-cp310-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","npl-3.1.0-cp310-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","npl-3.1.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["npl-3.1.0-cp310-abi3-macosx_10_12_x86_64.whl","npl-3.1.0-cp310-abi3-macosx_11_0_arm64.whl","npl-3.1.0-cp310-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","npl-3.1.0-cp310-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","npl-3.1.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["npl-3.1.0-cp310-abi3-macosx_10_12_x86_64.whl","npl-3.1.0-cp310-abi3-macosx_11_0_arm64.whl","npl-3.1.0-cp310-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","npl-3.1.0-cp310-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","npl-3.1.0-cp310-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"low":1}}}