{"url":"https://pypi.sbomify.com/package/toad/0.1.7","markdown_url":"https://pypi.sbomify.com/package/toad/0.1.7.md","name":"toad","version":"0.1.7","purl":"pkg:pypi/toad@0.1.7","summary":"Toad is dedicated to facilitating model development process, especially for a scorecard.","author":null,"project_urls":{"Changelog":"https://github.com/amphibian-dev/toad/blob/master/CHANGELOG.md","Documentation":"https://toad.readthedocs.io/en/stable/","Homepage":"https://github.com/amphibian-dev/toad","Issues":"https://github.com/amphibian-dev/toad/issues","Repository":"https://github.com/amphibian-dev/toad.git"},"requires_python":">=3.9","license":null,"classifiers":["Operating System :: MacOS :: MacOS X","Operating System :: Microsoft :: Windows","Operating System :: POSIX","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.9"],"wheels":[{"filename":"toad-0.1.7-cp39-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/32/5d/e2e1dc03306241e10bfdfc6e2766fe160140b0419bffe7fc8b6f79903f00/toad-0.1.7-cp39-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"debf30b5-18e8-56da-85e4-1a5833424397","path":"toad-0.1.7.dist-info/sboms/toad.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/debf30b5-18e8-56da-85e4-1a5833424397/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"toad-0.1.7-cp39-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/50/02/6ed1906fc487396d7b6c4314b793e9bae030328c5143eb6d143ad631c1cb/toad-0.1.7-cp39-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"a5dd2ee8-95a5-5db3-a720-387ef9d0094b","path":"toad-0.1.7.dist-info/sboms/toad.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a5dd2ee8-95a5-5db3-a720-387ef9d0094b/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"toad-0.1.7-cp39-abi3-manylinux_2_34_aarch64.whl","url":"https://files.pythonhosted.org/packages/d6/2b/d7c1b42183df348d32a051d7fe1763694fc570217f60de54f7ad6d4455db/toad-0.1.7-cp39-abi3-manylinux_2_34_aarch64.whl","sboms":[{"artifact_uuid":"528ca507-e44b-537f-a43b-f4911f4c6f1e","path":"toad-0.1.7.dist-info/sboms/toad.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/528ca507-e44b-537f-a43b-f4911f4c6f1e/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"toad-0.1.7-cp39-abi3-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/e5/6c/26a4798f1575182134e64c76a5cdda50c66383419cd049f12dc91d515f4d/toad-0.1.7-cp39-abi3-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"5d60d385-dc70-586b-aaa9-4c41e493c686","path":"toad-0.1.7.dist-info/sboms/toad.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5d60d385-dc70-586b-aaa9-4c41e493c686/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"toad-0.1.7-cp39-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/ad/38/b2ff12e366cd2bd4b3e45d0bab0155307e2135575fb9f4585079bf282e81/toad-0.1.7-cp39-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"9f1abef2-4aa4-5ba6-82d2-dd95177071c6","path":"toad-0.1.7.dist-info/sboms/toad.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9f1abef2-4aa4-5ba6-82d2-dd95177071c6/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":false,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["toad-0.1.7-cp39-abi3-macosx_10_12_x86_64.whl","toad-0.1.7-cp39-abi3-macosx_11_0_arm64.whl","toad-0.1.7-cp39-abi3-manylinux_2_34_aarch64.whl","toad-0.1.7-cp39-abi3-manylinux_2_34_x86_64.whl","toad-0.1.7-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["toad-0.1.7-cp39-abi3-macosx_10_12_x86_64.whl","toad-0.1.7-cp39-abi3-macosx_11_0_arm64.whl","toad-0.1.7-cp39-abi3-manylinux_2_34_aarch64.whl","toad-0.1.7-cp39-abi3-manylinux_2_34_x86_64.whl","toad-0.1.7-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["toad-0.1.7-cp39-abi3-macosx_10_12_x86_64.whl","toad-0.1.7-cp39-abi3-macosx_11_0_arm64.whl","toad-0.1.7-cp39-abi3-manylinux_2_34_aarch64.whl","toad-0.1.7-cp39-abi3-manylinux_2_34_x86_64.whl","toad-0.1.7-cp39-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"low":1}}}