{"url":"https://pypi.sbomify.com/package/pyluwen/0.10.0","markdown_url":"https://pypi.sbomify.com/package/pyluwen/0.10.0.md","name":"pyluwen","version":"0.10.0","purl":"pkg:pypi/pyluwen@0.10.0","summary":"Python bindings for luwen","author":"Daniel Rosen <drosen@tenstorrent.com>","project_urls":{"Source Code":"https://github.com/tenstorrent/luwen"},"requires_python":">=3.10","license":"Apache-2.0","classifiers":["License :: OSI Approved :: Apache Software License","Operating System :: POSIX :: Linux","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Rust","Topic :: System :: Hardware","Topic :: Utilities"],"wheels":[{"filename":"pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/26/ed/d217661fc15860a4c0f12a4e7fd6f541c81306624c3693f8f52a9a34202d/pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"c06cbe96-7c9c-52c2-8f93-08b55d2ea546","path":"pyluwen-0.10.0.dist-info/sboms/pyluwen.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c06cbe96-7c9c-52c2-8f93-08b55d2ea546/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"tenstorrent/luwen","workflow":"publish.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/tenstorrent/luwen/.github/workflows/publish.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"2414640513e5fe084bc2edef1a1f72720396b611","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/tenstorrent/luwen","1.3.6.1.4.1.57264.1.13":"2414640513e5fe084bc2edef1a1f72720396b611","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"722313558","1.3.6.1.4.1.57264.1.16":"https://github.com/tenstorrent","1.3.6.1.4.1.57264.1.17":"64161552","1.3.6.1.4.1.57264.1.18":"https://github.com/tenstorrent/luwen/.github/workflows/publish.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"2414640513e5fe084bc2edef1a1f72720396b611","1.3.6.1.4.1.57264.1.20":"repository_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/tenstorrent/luwen/actions/runs/37031446953/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/e0/33/37e74fa080bcffb629d52a4aea78754b996fd04c53eed8e1606f087736dd/pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"2250a2e8-dfdd-5d56-aa9c-8110ed3dbe2f","path":"pyluwen-0.10.0.dist-info/sboms/pyluwen.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2250a2e8-dfdd-5d56-aa9c-8110ed3dbe2f/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"tenstorrent/luwen","workflow":"publish.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/tenstorrent/luwen/.github/workflows/publish.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"2414640513e5fe084bc2edef1a1f72720396b611","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/tenstorrent/luwen","1.3.6.1.4.1.57264.1.13":"2414640513e5fe084bc2edef1a1f72720396b611","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"722313558","1.3.6.1.4.1.57264.1.16":"https://github.com/tenstorrent","1.3.6.1.4.1.57264.1.17":"64161552","1.3.6.1.4.1.57264.1.18":"https://github.com/tenstorrent/luwen/.github/workflows/publish.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"2414640513e5fe084bc2edef1a1f72720396b611","1.3.6.1.4.1.57264.1.20":"repository_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/tenstorrent/luwen/actions/runs/37031446953/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":2,"has_attestation":true,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.19.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.19.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.19.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.19.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.19.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.19.2","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.98","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.98","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.7.1","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.7.1","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2025-0119","aliases":[],"summary":"number_prefix crate is unmaintained","severity":"unknown","score":null,"package":"number_prefix","version":"0.4.0","ecosystem":"crates.io","purl":"pkg:cargo/number_prefix@0.4.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0119","wheels":["pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["pyluwen-0.10.0-cp310-cp310-manylinux_2_28_x86_64.whl","pyluwen-0.10.0-cp311-abi3-manylinux_2_28_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":2,"total_sboms":2,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"low":1,"unknown":5}}}