{"url":"https://pypi.sbomify.com/package/ripgrep/15.1.0","markdown_url":"https://pypi.sbomify.com/package/ripgrep/15.1.0.md","name":"ripgrep","version":"15.1.0","purl":"pkg:pypi/ripgrep@15.1.0","summary":"ripgrep is a line-oriented search tool that recursively searches the current directory for a regex pattern while respecting gitignore rules. ripgrep has first class support on Windows, macOS and Linux.","author":null,"project_urls":{"Documentation":"https://github.com/BurntSushi/ripgrep","Homepage":"https://github.com/BurntSushi/ripgrep","Repository":"https://github.com/BurntSushi/ripgrep"},"requires_python":">=3.8","license":null,"classifiers":["Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust"],"wheels":[{"filename":"ripgrep-15.1.0-py3-none-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/7e/42/994bb17dc45399f60bc850c9ea295b9638eb7abee9ec26cc386a2ebc264d/ripgrep-15.1.0-py3-none-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"0a36882c-3d50-5bc6-a028-cab70020ed16","path":"ripgrep-15.1.0.dist-info/sboms/ripgrep.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0a36882c-3d50-5bc6-a028-cab70020ed16/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"FlavioAmurrioCS/ripgrep","workflow":"main.yaml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/FlavioAmurrioCS/ripgrep/.github/workflows/main.yaml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"e41cfdc786bdcd2896bf020b5ba1fadb2227fa90","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/FlavioAmurrioCS/ripgrep","1.3.6.1.4.1.57264.1.13":"e41cfdc786bdcd2896bf020b5ba1fadb2227fa90","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"840832082","1.3.6.1.4.1.57264.1.16":"https://github.com/FlavioAmurrioCS","1.3.6.1.4.1.57264.1.17":"25621374","1.3.6.1.4.1.57264.1.18":"https://github.com/FlavioAmurrioCS/ripgrep/.github/workflows/main.yaml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"e41cfdc786bdcd2896bf020b5ba1fadb2227fa90","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/FlavioAmurrioCS/ripgrep/actions/runs/26351377548/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"ripgrep-15.1.0-py3-none-manylinux_2_39_x86_64.whl","url":"https://files.pythonhosted.org/packages/29/5c/951baee5033a25e9b79df51b378276fd0b3a88c7aba9665d50178e9738c1/ripgrep-15.1.0-py3-none-manylinux_2_39_x86_64.whl","sboms":[{"artifact_uuid":"c7cbc7ca-1bf6-51f4-b6ba-19b99149881e","path":"ripgrep-15.1.0.dist-info/sboms/ripgrep.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c7cbc7ca-1bf6-51f4-b6ba-19b99149881e/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"FlavioAmurrioCS/ripgrep","workflow":"main.yaml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/FlavioAmurrioCS/ripgrep/.github/workflows/main.yaml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"e41cfdc786bdcd2896bf020b5ba1fadb2227fa90","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/FlavioAmurrioCS/ripgrep","1.3.6.1.4.1.57264.1.13":"e41cfdc786bdcd2896bf020b5ba1fadb2227fa90","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"840832082","1.3.6.1.4.1.57264.1.16":"https://github.com/FlavioAmurrioCS","1.3.6.1.4.1.57264.1.17":"25621374","1.3.6.1.4.1.57264.1.18":"https://github.com/FlavioAmurrioCS/ripgrep/.github/workflows/main.yaml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"e41cfdc786bdcd2896bf020b5ba1fadb2227fa90","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/FlavioAmurrioCS/ripgrep/actions/runs/26351377548/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":2,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.100","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.100","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["ripgrep-15.1.0-py3-none-macosx_11_0_arm64.whl","ripgrep-15.1.0-py3-none-manylinux_2_39_x86_64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["ripgrep-15.1.0-py3-none-macosx_11_0_arm64.whl","ripgrep-15.1.0-py3-none-manylinux_2_39_x86_64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.9","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.9","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["ripgrep-15.1.0-py3-none-macosx_11_0_arm64.whl","ripgrep-15.1.0-py3-none-manylinux_2_39_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":2,"total_sboms":2,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"unknown":3}}}