{"url":"https://pypi.sbomify.com/package/tropical-gemm/0.4.0","markdown_url":"https://pypi.sbomify.com/package/tropical-gemm/0.4.0.md","name":"tropical-gemm","version":"0.4.0","purl":"pkg:pypi/tropical-gemm@0.4.0","summary":"Fast tropical matrix multiplication with automatic differentiation support","author":null,"project_urls":{"Repository":"https://github.com/TensorBFS/tropical-gemm"},"requires_python":">=3.8","license":"MIT","classifiers":["License :: OSI Approved :: MIT License","Operating System :: OS Independent","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Rust","Topic :: Scientific/Engineering :: Mathematics"],"wheels":[{"filename":"tropical_gemm-0.4.0-cp310-cp310-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/d3/4d/33f476bbcfd98689f9e177868c656895d7a45e2f951171c9edfc5c001031/tropical_gemm-0.4.0-cp310-cp310-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"eac43c58-57c9-5bf5-87ef-db7d483f1328","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/eac43c58-57c9-5bf5-87ef-db7d483f1328/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp310-cp310-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/e7/aa/8e7c00d5bde8a41c81f2200b7d7cddb1fe9d0e26bee168ab35a0e9656f11/tropical_gemm-0.4.0-cp310-cp310-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"9db92c34-fd4a-5fcb-8530-b4ea64b2619b","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9db92c34-fd4a-5fcb-8530-b4ea64b2619b/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/bb/df/4d17a8e30d610e9e1cf78af72e320f028c2213599e1c4707a947154f0fdf/tropical_gemm-0.4.0-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"bd103312-cfed-5e55-9f5e-759c57aaaedf","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bd103312-cfed-5e55-9f5e-759c57aaaedf/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp311-cp311-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/99/35/65fdefbd56488038d4d659e60d831da4c61afd3d3afa660711f43f28ad3c/tropical_gemm-0.4.0-cp311-cp311-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"029134d4-003f-504d-aa6d-91142e653cd2","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/029134d4-003f-504d-aa6d-91142e653cd2/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp311-cp311-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/04/25/f17eb065bb8355e494c1f6ec16b0a1219cafbaeca2d4e180284bd6d738dc/tropical_gemm-0.4.0-cp311-cp311-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"7f4f057d-c4f9-5199-9873-e8baaf4cf6db","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7f4f057d-c4f9-5199-9873-e8baaf4cf6db/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/0d/8c/99a9852de530cd4fa7d7f52be40140bfd8dfb8d11fb722191ecf73344fe3/tropical_gemm-0.4.0-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"fedc76bc-7c87-5ef2-8c91-ed5bb3ed38b3","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fedc76bc-7c87-5ef2-8c91-ed5bb3ed38b3/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/9e/3a/0cf73405b0864964e4246bfd157e34bdd1d1f2a5bf2845c84eed7fc7e410/tropical_gemm-0.4.0-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"ccac58d4-285a-502e-a3ed-eef7e293a9c6","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ccac58d4-285a-502e-a3ed-eef7e293a9c6/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp312-cp312-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/c1/90/71a5bcedc48067d671589bac9932ac6d334bfe8f016577de03f0bd511a33/tropical_gemm-0.4.0-cp312-cp312-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"e3deacb3-1c4a-5df5-958b-5d0d332e3eba","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e3deacb3-1c4a-5df5-958b-5d0d332e3eba/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/0c/15/5d8ca30cc694ca1de7bf0002dd4cd2d02b3ab6bb46ad36b73046b053b218/tropical_gemm-0.4.0-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"4ef2383f-6757-5dc9-ba92-783e39e76a88","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4ef2383f-6757-5dc9-ba92-783e39e76a88/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp39-cp39-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/74/d0/4be125c0f41fcedfa128abff2f038b7947dd94081928b191914a8dd3432c/tropical_gemm-0.4.0-cp39-cp39-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"0e16ceb5-352a-57a3-8f6b-c0a023395794","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0e16ceb5-352a-57a3-8f6b-c0a023395794/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp39-cp39-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/fb/4a/19b5fa9977b38f9c207759550606e64c8afce2b2b7c20ed58ce45db5285e/tropical_gemm-0.4.0-cp39-cp39-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"d2351e51-0be2-5eae-9ec0-8373b5b8c1fa","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d2351e51-0be2-5eae-9ec0-8373b5b8c1fa/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"tropical_gemm-0.4.0-cp39-cp39-win_amd64.whl","url":"https://files.pythonhosted.org/packages/f4/c4/c32c427a4a66ab5441e10fb45b61e0bbee2aefcac2e95961d7bcf8c5c1fd/tropical_gemm-0.4.0-cp39-cp39-win_amd64.whl","sboms":[{"artifact_uuid":"a5e5ee14-bba2-5d75-8fd3-ee0878e37d79","path":"tropical_gemm-0.4.0.dist-info/sboms/tropical-gemm-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a5e5ee14-bba2-5d75-8fd3-ee0878e37d79/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":12,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["tropical_gemm-0.4.0-cp310-cp310-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp310-cp310-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp310-cp310-win_amd64.whl","tropical_gemm-0.4.0-cp311-cp311-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp311-cp311-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp311-cp311-win_amd64.whl","tropical_gemm-0.4.0-cp312-cp312-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp312-cp312-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp312-cp312-win_amd64.whl","tropical_gemm-0.4.0-cp39-cp39-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp39-cp39-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["tropical_gemm-0.4.0-cp310-cp310-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp310-cp310-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp310-cp310-win_amd64.whl","tropical_gemm-0.4.0-cp311-cp311-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp311-cp311-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp311-cp311-win_amd64.whl","tropical_gemm-0.4.0-cp312-cp312-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp312-cp312-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp312-cp312-win_amd64.whl","tropical_gemm-0.4.0-cp39-cp39-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp39-cp39-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["tropical_gemm-0.4.0-cp310-cp310-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp310-cp310-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp310-cp310-win_amd64.whl","tropical_gemm-0.4.0-cp311-cp311-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp311-cp311-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp311-cp311-win_amd64.whl","tropical_gemm-0.4.0-cp312-cp312-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp312-cp312-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp312-cp312-win_amd64.whl","tropical_gemm-0.4.0-cp39-cp39-macosx_11_0_arm64.whl","tropical_gemm-0.4.0-cp39-cp39-manylinux_2_34_x86_64.whl","tropical_gemm-0.4.0-cp39-cp39-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":12,"total_sboms":12,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"unknown":1}}}