{"url":"https://pypi.sbomify.com/package/pyrefly/1.4.1","markdown_url":"https://pypi.sbomify.com/package/pyrefly/1.4.1.md","name":"pyrefly","version":"1.4.1","purl":"pkg:pypi/pyrefly@1.4.1","summary":"A fast type checker and language server for Python with powerful IDE features","author":null,"project_urls":{"documentation":"https://pyrefly.org/en/docs/","homepage":"https://pyrefly.org"},"requires_python":">=3.8","license":null,"classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","License :: OSI Approved :: MIT License","Operating System :: MacOS","Operating System :: Microsoft :: Windows","Operating System :: POSIX :: Linux","Programming Language :: Python","Programming Language :: Python :: 3","Programming Language :: Python :: 3 :: Only","Topic :: Software Development"],"wheels":[{"filename":"pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/c5/a1/736ef07aa3c87e7db31d246024a98cb6fbf6d48e52784025758f19cca02d/pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"e3eb9b0a-9b6f-51f9-84e0-bfd6aa73d921","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e3eb9b0a-9b6f-51f9-84e0-bfd6aa73d921/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/0f/9a/0cc181ebbde26f63e96a61fcb4d6262342017cb83fa34f494a13134de6c5/pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"eaad71b6-5705-58c9-8f85-57b2a3d9a55f","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/eaad71b6-5705-58c9-8f85-57b2a3d9a55f/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/ad/7c/bba5e480eb1620b864e45f7551f7e5014351eb42be4e6b5f0dd036b15071/pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"bfc19271-4bff-5e97-a50a-a66b7fa9fbd8","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bfc19271-4bff-5e97-a50a-a66b7fa9fbd8/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","url":"https://files.pythonhosted.org/packages/6b/1b/05f9e265e5b331a23b5a50604e4d4bb25ecb31cf47f37048a765b6c1edf1/pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","sboms":[{"artifact_uuid":"46489903-e236-54a6-a2b3-39e14434e75f","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/46489903-e236-54a6-a2b3-39e14434e75f/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","url":"https://files.pythonhosted.org/packages/7a/1e/b85dbfe3cc01585ed153af013aa8685b2970addba454fb257561c411fb87/pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","sboms":[{"artifact_uuid":"d8d0dae3-c326-56a7-8867-8eea224605be","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d8d0dae3-c326-56a7-8867-8eea224605be/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/2f/c5/0f1a9d1ad13a74e4efcbb8a94a89381e56dfff0d4dceeba8a9f633901c75/pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"4981b8ff-961d-534a-8194-43199fa9816c","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4981b8ff-961d-534a-8194-43199fa9816c/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/e2/c8/8fd47bfa2e8ab300dcfd4f1d15ef6bd4ed6290ba082a98597d8e8bcd2153/pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"00ddd75d-a7cd-5a79-9187-704f3598eebc","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/00ddd75d-a7cd-5a79-9187-704f3598eebc/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/fe/02/3cf7cf460924951891fcbc491f0667c7940e14918ef87a51d9a852bd481a/pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"f9765e98-4702-57d8-8644-6669abb4399b","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f9765e98-4702-57d8-8644-6669abb4399b/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-win32.whl","url":"https://files.pythonhosted.org/packages/9e/ec/0047ba1b722015f95568f28be61928c997fdd4d2e7b78b63e2bb5b8446a2/pyrefly-1.4.1-py3-none-win32.whl","sboms":[{"artifact_uuid":"604f91b9-d06b-5c98-90d6-560d27c3a7be","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/604f91b9-d06b-5c98-90d6-560d27c3a7be/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/5a/d2/5b855b69afc9401f2434abe3e2ded05f3c78905d478beecad05117b2329a/pyrefly-1.4.1-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"fd4fbe22-857f-5db5-9b9f-1ef3ac93a7f2","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fd4fbe22-857f-5db5-9b9f-1ef3ac93a7f2/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrefly-1.4.1-py3-none-win_arm64.whl","url":"https://files.pythonhosted.org/packages/13/84/33b63735654fc3258ee74bbe4a4a6d587c4a0334ba9e8eb17a8d8107bddc/pyrefly-1.4.1-py3-none-win_arm64.whl","sboms":[{"artifact_uuid":"297377f0-9d6a-5458-8d0f-873f27e8d092","path":"pyrefly-1.4.1.dist-info/sboms/pyrefly.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/297377f0-9d6a-5458-8d0f-873f27e8d092/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"meta/pyrefly","workflow":"publish_to_pypi.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.10":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/meta/pyrefly","1.3.6.1.4.1.57264.1.13":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.14":"refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.15":"935685654","1.3.6.1.4.1.57264.1.16":"https://github.com/meta","1.3.6.1.4.1.57264.1.17":"69631","1.3.6.1.4.1.57264.1.18":"https://github.com/meta/pyrefly/.github/workflows/publish_to_pypi.yml@refs/heads/release/v1.4","1.3.6.1.4.1.57264.1.19":"b726cd5f45eec1443e0f224dedd1dd45dcfb1a5d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/meta/pyrefly/actions/runs/41953897761/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":11,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0385","aliases":[],"summary":"Non-constant-time mask generation and `u128` comparisons","severity":"unknown","score":null,"package":"ctutils","version":"0.4.2","ecosystem":"crates.io","purl":"pkg:cargo/ctutils@0.4.2","fixed":["0.4.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0385","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2024-0388","aliases":[],"summary":"`derivative` is unmaintained; consider using an alternative","severity":"unknown","score":null,"package":"derivative","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/derivative@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0388","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0306","aliases":[],"summary":"`hex_decode_unchecked` AVX2 path reads past `src`","severity":"unknown","score":null,"package":"faster-hex","version":"0.6.1","ecosystem":"crates.io","purl":"pkg:cargo/faster-hex@0.6.1","fixed":["0.10.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0306","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2025-0057","aliases":[],"summary":"fxhash - no longer maintained","severity":"unknown","score":null,"package":"fxhash","version":"0.2.1","ecosystem":"crates.io","purl":"pkg:cargo/fxhash@0.2.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0057","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.2","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.2","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.14.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.14.0","fixed":["0.13.4","0.14.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.1.0+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.1.0%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["pyrefly-1.4.1-py3-none-macosx_10_12_x86_64.whl","pyrefly-1.4.1-py3-none-macosx_11_0_arm64.whl","pyrefly-1.4.1-py3-none-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyrefly-1.4.1-py3-none-manylinux2014_i686.manylinux_2_17_i686.whl","pyrefly-1.4.1-py3-none-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl","pyrefly-1.4.1-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_aarch64.whl","pyrefly-1.4.1-py3-none-musllinux_1_2_x86_64.whl","pyrefly-1.4.1-py3-none-win32.whl","pyrefly-1.4.1-py3-none-win_amd64.whl","pyrefly-1.4.1-py3-none-win_arm64.whl"]}],"vulnerability_scan":{"scanned_sboms":11,"total_sboms":11,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"unknown":20}}}