GitHub repository

openai/frontier-evals

https://github.com/openai/frontier-evals (main)

Import Notes 7 notes from dependency parsing

Scanned 12 dependency files in this repository.

Included 20 Python dependencies without an exact installed version; OSV matching requires a lockfile or exact pin.

Included 21 Python dependencies without an exact installed version; OSV matching requires a lockfile or exact pin. 2 times

Included 23 Python dependencies without an exact installed version; OSV matching requires a lockfile or exact pin.

Included 3 Python dependencies without an exact installed version; OSV matching requires a lockfile or exact pin.

Included 6 Python dependencies without an exact installed version; OSV matching requires a lockfile or exact pin.

0 Runtime Findings No confirmed runtime exposure found

63 Non-Runtime Findings 32 critical/high packages in workspace, vendored, eval, test, docs, or unclear sources

51 Unverified Versions Inventoried, not counted as vulnerable

372 Clear Versions No OSV advisories for these exact package versions

Scan Diagnostics 63 affected versions · 183 advisories · 486 total package versions Show detailsHide details

486 Total Package Versions 63 confirmed affected, 51 unverified

4 Deepest Vulnerability Path dependency levels from the repository root

0 Runtime Candidate Findings 63 confirmed in non-runtime or unclear sources

48 Transitive Affected Packages 15 direct confirmed affected packages

15 Direct Affected Packages Closest fixes to prioritize first if exposure is runtime

32 Critical / High Packages 1 critical · 31 high across all exposure classes

Scanned Dependency Files 11 files · 636 transitive dependencies Show detailsHide details

The repository is the root. These files are the evidence sources used to build the aggregate dependency view.

project/swelancer/uv.lock 181 components · 13 direct · 26 vulnerable

project/evmbench/uv.lock 179 components · 24 direct · 20 vulnerable

project/paperbench/uv.lock 205 components · 29 direct · 19 vulnerable

project/common/alcatraz/uv.lock 130 components · 31 direct · 14 vulnerable

project/common/preparedness_turn_completer/uv.lock 49 components · 11 direct · 6 vulnerable

project/swelancer/requirements.txt 40 components · 40 direct · 5 vulnerable

project/common/alcatraz/pyproject.toml 23 components · 23 direct · 0 vulnerable

project/common/compatibility_api/pyproject.toml 3 components · 3 direct · 0 vulnerable

project/evmbench/pyproject.toml 20 components · 20 direct · 0 vulnerable

project/paperbench/pyproject.toml 21 components · 21 direct · 0 vulnerable

project/swelancer/pyproject.toml 6 components · 6 direct · 0 vulnerable

Vulnerability Monitor

63 confirmed affected package versions · 183 unique advisories · 15 confirmed affected direct dependencies · 51 unverified package versions · 41 duplicate occurrences collapsed

CRITICAL 1 HIGH 31 MEDIUM 27 LOW 4 UNKNOWN 0

Confirmed findings require package ecosystem, package name, and exact installed version. Exposure labels separate advisory severity from where the dependency evidence came from, such as runtime, workspace, test, docs, or vendored eval files.

Critical 1 packages · 1 advisories Packages whose highest matched advisory is critical.

h11 0.14.0 · PyPI · transitive Workspace project/swelancer/uv.lock transitive 4 levels deep

1 graph available for this package version Shown at confirmed critical advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

CRITICAL Workspace 1 advisory

High 31 packages · 118 advisories Packages whose highest matched advisory is high.

pillow 12.0.0 · PyPI · direct Workspace 2 occurrences across 2 files direct dependency

2 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 2 advisories 2 files

lxml 5.3.0 · PyPI · direct Workspace project/swelancer/requirements.txt direct dependency

1 graph available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 1 advisory

mitmproxy 11.0.2 · PyPI · direct Workspace project/swelancer/requirements.txt direct dependency

3 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 3 advisories

cryptography 46.0.3 · PyPI · transitive Workspace 2 occurrences across 2 files transitive 2 levels deep

3 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 3 advisories 2 files

tornado 6.5.2 · PyPI · transitive Workspace 2 occurrences across 2 files transitive 2 levels deep

3 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 3 advisories 2 files

urllib3 2.5.0 · PyPI · transitive Workspace 3 occurrences across 3 files transitive 2 levels deep

3 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 3 advisories 3 files

cryptography 45.0.3 · PyPI · transitive Workspace project/evmbench/uv.lock transitive 3 levels deep

3 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 3 advisories

pillow 11.2.1 · PyPI · transitive Workspace project/evmbench/uv.lock transitive 2 levels deep

4 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 4 advisories

HIGH

GHSA-cfh3-3jmp-rvhc Pillow affected by out-of-bounds write when loading PSD images Fixed: 12.1.1 · BIT-pillow-2026-25990, CVE-2026-25990 · GitHub reviewed · Subproject dependency evidence; installed when that workspace/package is used.

HIGH

GHSA-whj4-6x5x-4v2j FITS GZIP decompression bomb in Pillow Fixed: 12.2.0 · BIT-pillow-2026-40192, CVE-2026-40192 · GitHub reviewed · Subproject dependency evidence; installed when that workspace/package is used.

HIGH

GHSA-xg8h-j46f-w952 Pillow vulnerability can cause write buffer overflow on BCn encoding Fixed: 11.3.0 · BIT-pillow-2025-48379, CVE-2025-48379 · GitHub reviewed · Subproject dependency evidence; installed when that workspace/package is used.

UNKNOWN

PYSEC-2025-61 Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without che Fixed: 11.3.0 · BIT-pillow-2025-48379, CVE-2025-48379 · Subproject dependency evidence; installed when that workspace/package is used.

tornado 6.5.1 · PyPI · transitive Workspace project/evmbench/uv.lock transitive 3 levels deep

3 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 3 advisories

cryptography 44.0.0 · PyPI · transitive Workspace project/swelancer/uv.lock transitive 3 levels deep

3 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 3 advisories

setuptools 75.8.0 · PyPI · transitive Workspace project/swelancer/uv.lock transitive 3 levels deep

2 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 2 advisories

tornado 6.4.2 · PyPI · transitive Workspace project/swelancer/uv.lock transitive 3 levels deep

4 graphs available for this package version Shown at confirmed high advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Workspace 4 advisories

HIGH

GHSA-7cx3-6m66-7c5m Tornado vulnerable to excessive logging caused by malformed multipart form data Fixed: 6.5 · CVE-2025-47287 · GitHub reviewed · Subproject dependency evidence; installed when that workspace/package is used.

HIGH

GHSA-fqwm-6jpj-5wxc Tornado has cookie attribute injection via .RequestHandler.set_cookie Fixed: 6.5.5 · CVE-2026-35536 · GitHub reviewed · Subproject dependency evidence; installed when that workspace/package is used.

HIGH

GHSA-qjxf-f2mg-c6mc Tornado is vulnerable to DoS due to too many multipart parts Fixed: 6.5.5 · CVE-2026-31958 · GitHub reviewed · Subproject dependency evidence; installed when that workspace/package is used.

MEDIUM

GHSA-78cv-mqj4-43f7 Tornado has incomplete validation of cookie attributes Fixed: 6.5.5 · GitHub reviewed · Subproject dependency evidence; installed when that workspace/package is used.

Medium 27 packages · 60 advisories Packages whose highest matched advisory is medium.

filelock 3.20.0 · PyPI · direct Workspace 3 occurrences across 3 files direct dependency

2 graphs available for this package version Shown at confirmed medium advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

MEDIUM Workspace 2 advisories 3 files

pytest 9.0.1 · PyPI · direct Workspace 3 occurrences across 3 files direct dependency

1 graph available for this package version Shown at confirmed medium advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

MEDIUM Workspace 1 advisory 3 files

pytest 8.4.0 · PyPI · direct Workspace project/evmbench/uv.lock direct dependency

1 graph available for this package version Shown at confirmed medium advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

MEDIUM Workspace 1 advisory

pip 25.1.1 · PyPI · transitive Workspace project/evmbench/uv.lock transitive 3 levels deep

3 graphs available for this package version Shown at confirmed medium advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

MEDIUM Workspace 3 advisories

pip 25.0.1 · PyPI · transitive Workspace project/swelancer/uv.lock transitive 3 levels deep

3 graphs available for this package version Shown at confirmed medium advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

MEDIUM Workspace 3 advisories

werkzeug 3.1.3 · PyPI · transitive Workspace project/swelancer/uv.lock transitive 2 levels deep

3 graphs available for this package version Shown at confirmed medium advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

MEDIUM Workspace 3 advisories

Low and Unknown 4 packages · 4 advisories Packages with low or unknown advisory severity.

flask 3.1.2 · PyPI · direct Workspace 2 occurrences across 2 files direct dependency

1 graph available for this package version Shown at confirmed low advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

LOW Workspace 1 advisory 2 files

flask 3.1.1 · PyPI · direct Workspace project/swelancer/uv.lock direct dependency

1 graph available for this package version Shown at confirmed low advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

LOW Workspace 1 advisory

pygments 2.19.2 · PyPI · transitive Workspace 3 occurrences across 3 files transitive 2 levels deep

1 graph available for this package version Shown at confirmed low advisory severity with workspace exposure evidence. Choose a graph to inspect the specific advisory and path.

LOW Workspace 1 advisory 3 files

SBOM Manifest

63 confirmed affected package versions, 51 unverified package versions, 372 clear package versions.

114 review rows · 372 clear hidden Show tableHide table

Component	Version	Ecosystem	Scope	Exposure	Source	Package URL	Status
h11	0.14.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/h11@0.14.0	CRITICAL 1 exact-version OSV advisory
Choose a graph for h11@0.14.0 1 advisory CRITICAL GHSA-vqfr-h8mv-ghfj h11 accepts some malformed Chunked-Encoding bodies Fixed: 0.16.0 · Subproject dependency evidence; installed when that workspace/package is used.
pillow	12.0.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/pillow@12.0.0	HIGH 2 exact-version OSV advisories
Choose a graph for pillow@12.0.0 2 advisories HIGH GHSA-cfh3-3jmp-rvhc Pillow affected by out-of-bounds write when loading PSD images Fixed: 12.1.1 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-whj4-6x5x-4v2j FITS GZIP decompression bomb in Pillow Fixed: 12.2.0 · Subproject dependency evidence; installed when that workspace/package is used.
lxml	5.3.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/lxml@5.3.0	HIGH 1 exact-version OSV advisory
Choose a graph for lxml@5.3.0 1 advisory HIGH GHSA-vfmq-68hx-4jfw lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files Fixed: 6.1.0 · Subproject dependency evidence; installed when that workspace/package is used.
mitmproxy	11.0.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/mitmproxy@11.0.2	HIGH 3 exact-version OSV advisories
Choose a graph for mitmproxy@11.0.2 3 advisories HIGH GHSA-wg33-5h85-7q5p Mitmweb API Authentication Bypass Using Proxy Server Fixed: 11.1.2 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-527g-3w9m-29hv mitmproxy has an LDAP Injection Fixed: 12.2.2 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-63cx-g855-hvv4 mitmproxy binaries embed a vulnerable python-hyper/h2 dependency Fixed: 12.1.2 · Subproject dependency evidence; installed when that workspace/package is used.
azure-core	1.36.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/azure-core@1.36.0	HIGH 1 exact-version OSV advisory
Choose a graph for azure-core@1.36.0 1 advisory HIGH GHSA-jm66-cg57-jjv5 Azure Core is vulnerable to deserialization of untrusted data Fixed: 1.38.0 · Subproject dependency evidence; installed when that workspace/package is used.
cryptography	46.0.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/cryptography@46.0.3	HIGH 3 exact-version OSV advisories
Choose a graph for cryptography@46.0.3 3 advisories HIGH GHSA-r6ph-v2qm-q3c2 cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves Fixed: 46.0.5 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-p423-j2cm-9vmq Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs Fixed: 46.0.7 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-m959-cc7f-wv43 cryptography has incomplete DNS name constraint enforcement on peer names Fixed: 46.0.6 · Subproject dependency evidence; installed when that workspace/package is used.
lxml	6.0.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/lxml@6.0.2	HIGH 1 exact-version OSV advisory
Choose a graph for lxml@6.0.2 1 advisory HIGH GHSA-vfmq-68hx-4jfw lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files Fixed: 6.1.0 · Subproject dependency evidence; installed when that workspace/package is used.
pyjwt	2.10.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/pyjwt@2.10.1	HIGH 1 exact-version OSV advisory
Choose a graph for pyjwt@2.10.1 1 advisory HIGH GHSA-752w-5fwx-jx9f PyJWT accepts unknown `crit` header extensions Fixed: 2.12.0 · Subproject dependency evidence; installed when that workspace/package is used.
tornado	6.5.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/tornado@6.5.2	HIGH 3 exact-version OSV advisories
Choose a graph for tornado@6.5.2 3 advisories HIGH GHSA-fqwm-6jpj-5wxc Tornado has cookie attribute injection via .RequestHandler.set_cookie Fixed: 6.5.5 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-qjxf-f2mg-c6mc Tornado is vulnerable to DoS due to too many multipart parts Fixed: 6.5.5 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-78cv-mqj4-43f7 Tornado has incomplete validation of cookie attributes Fixed: 6.5.5 · Subproject dependency evidence; installed when that workspace/package is used.
urllib3	2.5.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/urllib3@2.5.0	HIGH 3 exact-version OSV advisories
Choose a graph for urllib3@2.5.0 3 advisories HIGH GHSA-2xpw-w6gg-jr37 urllib3 streaming API improperly handles highly compressed data Fixed: 2.6.0 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-38jv-5279-wg99 Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) Fixed: 2.6.3 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-gm62-xv2j-4w53 urllib3 allows an unbounded number of links in the decompression chain Fixed: 2.6.0 · Subproject dependency evidence; installed when that workspace/package is used.
aiohttp	3.12.9	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/aiohttp@3.12.9	HIGH 19 exact-version OSV advisories
Choose a graph for aiohttp@3.12.9 19 advisories HIGH GHSA-6mq8-rvhq-8wgg AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-6jhg-hg63-jvvf AIOHTTP vulnerable to denial of service through large payloads Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-c427-h43c-vf67 AIOHTTP accepts duplicate Host headers Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-g84x-mcqj-x9qq AIOHTTP vulnerable to DoS through chunked messages Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-jj3x-wxrx-4x23 AIOHTTP vulnerable to DoS when bypassing asserts Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-m5qp-6w8w-w647 AIOHTTP has a Multipart Header Size Bypass Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-p998-jp59-783m AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-w2fm-2cpv-w7v5 aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-2vrm-gr82-f7m5 AIOHTTP has CRLF injection through multipart part content type header construction Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-3wq7-rqq7-wx6j AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-54jq-c3m8-4m76 AIOHTTP vulnerable to brute-force leak of internal static ﬁle path components Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-63hf-3vf5-4wqf AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-69f9-5gxw-wvc2 AIOHTTP's unicode processing of header values could cause parsing discrepancies Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-9548-qrrj-x5pj AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections Fixed: 3.12.14 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-966j-vmvw-g2g9 AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-fh55-r93g-j68g AIOHTTP Vulnerable to Cookie Parser Warning Storm Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-hcc4-c3v8-rx92 AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-mqqc-3gqh-h2x8 AIOHTTP has unicode match groups in regexes for ASCII protocol elements Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-mwh4-6h8g-pg8w AIOHTTP has HTTP response splitting via \r in reason phrase Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used.
azure-core	1.34.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/azure-core@1.34.0	HIGH 1 exact-version OSV advisory
Choose a graph for azure-core@1.34.0 1 advisory HIGH GHSA-jm66-cg57-jjv5 Azure Core is vulnerable to deserialization of untrusted data Fixed: 1.38.0 · Subproject dependency evidence; installed when that workspace/package is used.
cryptography	45.0.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/cryptography@45.0.3	HIGH 3 exact-version OSV advisories
Choose a graph for cryptography@45.0.3 3 advisories HIGH GHSA-r6ph-v2qm-q3c2 cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves Fixed: 46.0.5 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-p423-j2cm-9vmq Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs Fixed: 46.0.7 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-m959-cc7f-wv43 cryptography has incomplete DNS name constraint enforcement on peer names Fixed: 46.0.6 · Subproject dependency evidence; installed when that workspace/package is used.
lxml	5.4.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/lxml@5.4.0	HIGH 1 exact-version OSV advisory
Choose a graph for lxml@5.4.0 1 advisory HIGH GHSA-vfmq-68hx-4jfw lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files Fixed: 6.1.0 · Subproject dependency evidence; installed when that workspace/package is used.
pillow	11.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pillow@11.2.1	HIGH 4 exact-version OSV advisories
Choose a graph for pillow@11.2.1 4 advisories HIGH GHSA-cfh3-3jmp-rvhc Pillow affected by out-of-bounds write when loading PSD images Fixed: 12.1.1 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-whj4-6x5x-4v2j FITS GZIP decompression bomb in Pillow Fixed: 12.2.0 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-xg8h-j46f-w952 Pillow vulnerability can cause write buffer overflow on BCn encoding Fixed: 11.3.0 · Subproject dependency evidence; installed when that workspace/package is used. UNKNOWN PYSEC-2025-61 Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without che Fixed: 11.3.0 · Subproject dependency evidence; installed when that workspace/package is used.
protobuf	6.31.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/protobuf@6.31.1	HIGH 1 exact-version OSV advisory
Choose a graph for protobuf@6.31.1 1 advisory HIGH GHSA-7gcm-g887-7qv7 protobuf affected by a JSON recursion depth bypass Fixed: 5.29.6 · Subproject dependency evidence; installed when that workspace/package is used.
starlette	0.46.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/starlette@0.46.2	HIGH 2 exact-version OSV advisories
Choose a graph for starlette@0.46.2 2 advisories HIGH GHSA-7f5h-v6xp-fcq8 Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse`` Fixed: 0.49.1 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-2c2j-9gv5-cj73 Starlette has possible denial-of-service vector when parsing large files in multipart forms Fixed: 0.47.2 · Subproject dependency evidence; installed when that workspace/package is used.
tornado	6.5.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/tornado@6.5.1	HIGH 3 exact-version OSV advisories
Choose a graph for tornado@6.5.1 3 advisories HIGH GHSA-fqwm-6jpj-5wxc Tornado has cookie attribute injection via .RequestHandler.set_cookie Fixed: 6.5.5 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-qjxf-f2mg-c6mc Tornado is vulnerable to DoS due to too many multipart parts Fixed: 6.5.5 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-78cv-mqj4-43f7 Tornado has incomplete validation of cookie attributes Fixed: 6.5.5 · Subproject dependency evidence; installed when that workspace/package is used.
urllib3	2.4.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/urllib3@2.4.0	HIGH 5 exact-version OSV advisories
Choose a graph for urllib3@2.4.0 5 advisories HIGH GHSA-2xpw-w6gg-jr37 urllib3 streaming API improperly handles highly compressed data Fixed: 2.6.0 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-38jv-5279-wg99 Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) Fixed: 2.6.3 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-gm62-xv2j-4w53 urllib3 allows an unbounded number of links in the decompression chain Fixed: 2.6.0 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-48p4-8xcf-vxj5 urllib3 does not control redirects in browsers and Node.js Fixed: 2.5.0 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-pq67-6m6q-mj2v urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation Fixed: 2.5.0 · Subproject dependency evidence; installed when that workspace/package is used.
aiohttp	3.13.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/aiohttp@3.13.2	HIGH 18 exact-version OSV advisories
Choose a graph for aiohttp@3.13.2 18 advisories HIGH GHSA-6mq8-rvhq-8wgg AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-6jhg-hg63-jvvf AIOHTTP vulnerable to denial of service through large payloads Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-c427-h43c-vf67 AIOHTTP accepts duplicate Host headers Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-g84x-mcqj-x9qq AIOHTTP vulnerable to DoS through chunked messages Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-jj3x-wxrx-4x23 AIOHTTP vulnerable to DoS when bypassing asserts Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-m5qp-6w8w-w647 AIOHTTP has a Multipart Header Size Bypass Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-p998-jp59-783m AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-w2fm-2cpv-w7v5 aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-2vrm-gr82-f7m5 AIOHTTP has CRLF injection through multipart part content type header construction Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-3wq7-rqq7-wx6j AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-54jq-c3m8-4m76 AIOHTTP vulnerable to brute-force leak of internal static ﬁle path components Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-63hf-3vf5-4wqf AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-69f9-5gxw-wvc2 AIOHTTP's unicode processing of header values could cause parsing discrepancies Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-966j-vmvw-g2g9 AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-fh55-r93g-j68g AIOHTTP Vulnerable to Cookie Parser Warning Storm Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-hcc4-c3v8-rx92 AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-mqqc-3gqh-h2x8 AIOHTTP has unicode match groups in regexes for ASCII protocol elements Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-mwh4-6h8g-pg8w AIOHTTP has HTTP response splitting via \r in reason phrase Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used.
protobuf	6.33.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/protobuf@6.33.1	HIGH 1 exact-version OSV advisory
Choose a graph for protobuf@6.33.1 1 advisory HIGH GHSA-7gcm-g887-7qv7 protobuf affected by a JSON recursion depth bypass Fixed: 5.29.6 · Subproject dependency evidence; installed when that workspace/package is used.
aiohttp	3.11.12	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/aiohttp@3.11.12	HIGH 19 exact-version OSV advisories
Choose a graph for aiohttp@3.11.12 19 advisories HIGH GHSA-6mq8-rvhq-8wgg AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-6jhg-hg63-jvvf AIOHTTP vulnerable to denial of service through large payloads Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-c427-h43c-vf67 AIOHTTP accepts duplicate Host headers Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-g84x-mcqj-x9qq AIOHTTP vulnerable to DoS through chunked messages Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-jj3x-wxrx-4x23 AIOHTTP vulnerable to DoS when bypassing asserts Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-m5qp-6w8w-w647 AIOHTTP has a Multipart Header Size Bypass Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-p998-jp59-783m AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-w2fm-2cpv-w7v5 aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-2vrm-gr82-f7m5 AIOHTTP has CRLF injection through multipart part content type header construction Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-3wq7-rqq7-wx6j AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-54jq-c3m8-4m76 AIOHTTP vulnerable to brute-force leak of internal static ﬁle path components Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-63hf-3vf5-4wqf AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-69f9-5gxw-wvc2 AIOHTTP's unicode processing of header values could cause parsing discrepancies Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-9548-qrrj-x5pj AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections Fixed: 3.12.14 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-966j-vmvw-g2g9 AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-fh55-r93g-j68g AIOHTTP Vulnerable to Cookie Parser Warning Storm Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-hcc4-c3v8-rx92 AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-mqqc-3gqh-h2x8 AIOHTTP has unicode match groups in regexes for ASCII protocol elements Fixed: 3.13.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-mwh4-6h8g-pg8w AIOHTTP has HTTP response splitting via \r in reason phrase Fixed: 3.13.4 · Subproject dependency evidence; installed when that workspace/package is used.
azure-core	1.32.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/azure-core@1.32.0	HIGH 1 exact-version OSV advisory
Choose a graph for azure-core@1.32.0 1 advisory HIGH GHSA-jm66-cg57-jjv5 Azure Core is vulnerable to deserialization of untrusted data Fixed: 1.38.0 · Subproject dependency evidence; installed when that workspace/package is used.
cryptography	44.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/cryptography@44.0.0	HIGH 3 exact-version OSV advisories
Choose a graph for cryptography@44.0.0 3 advisories HIGH GHSA-r6ph-v2qm-q3c2 cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves Fixed: 46.0.5 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-79v4-65xg-pq4g Vulnerable OpenSSL included in cryptography wheels Fixed: 44.0.1 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-m959-cc7f-wv43 cryptography has incomplete DNS name constraint enforcement on peer names Fixed: 46.0.6 · Subproject dependency evidence; installed when that workspace/package is used.
jupyter-core	5.7.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/jupyter-core@5.7.2	HIGH 1 exact-version OSV advisory
Choose a graph for jupyter-core@5.7.2 1 advisory HIGH GHSA-33p9-3p43-82vq Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability Fixed: 5.8.1 · Subproject dependency evidence; installed when that workspace/package is used.
lxml	5.3.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/lxml@5.3.1	HIGH 1 exact-version OSV advisory
Choose a graph for lxml@5.3.1 1 advisory HIGH GHSA-vfmq-68hx-4jfw lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files Fixed: 6.1.0 · Subproject dependency evidence; installed when that workspace/package is used.
pillow	11.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pillow@11.1.0	HIGH 2 exact-version OSV advisories
Choose a graph for pillow@11.1.0 2 advisories HIGH GHSA-cfh3-3jmp-rvhc Pillow affected by out-of-bounds write when loading PSD images Fixed: 12.1.1 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-whj4-6x5x-4v2j FITS GZIP decompression bomb in Pillow Fixed: 12.2.0 · Subproject dependency evidence; installed when that workspace/package is used.
protobuf	5.29.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/protobuf@5.29.3	HIGH 2 exact-version OSV advisories
Choose a graph for protobuf@5.29.3 2 advisories HIGH GHSA-7gcm-g887-7qv7 protobuf affected by a JSON recursion depth bypass Fixed: 5.29.6 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-8qvm-5x2c-j2w7 protobuf-python has a potential Denial of Service issue Fixed: 4.25.8 · Subproject dependency evidence; installed when that workspace/package is used.
setuptools	75.8.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/setuptools@75.8.0	HIGH 2 exact-version OSV advisories
Choose a graph for setuptools@75.8.0 2 advisories HIGH GHSA-5rjg-fvgr-3xxf setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write Fixed: 78.1.1 · Subproject dependency evidence; installed when that workspace/package is used. UNKNOWN PYSEC-2025-49 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed t Fixed: 250a6d17978f9f6ac3ac887091f2d32886fbbb0b · Subproject dependency evidence; installed when that workspace/package is used.
starlette	0.45.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/starlette@0.45.3	HIGH 2 exact-version OSV advisories
Choose a graph for starlette@0.45.3 2 advisories HIGH GHSA-7f5h-v6xp-fcq8 Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse`` Fixed: 0.49.1 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-2c2j-9gv5-cj73 Starlette has possible denial-of-service vector when parsing large files in multipart forms Fixed: 0.47.2 · Subproject dependency evidence; installed when that workspace/package is used.
tornado	6.4.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/tornado@6.4.2	HIGH 4 exact-version OSV advisories
Choose a graph for tornado@6.4.2 4 advisories HIGH GHSA-7cx3-6m66-7c5m Tornado vulnerable to excessive logging caused by malformed multipart form data Fixed: 6.5 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-fqwm-6jpj-5wxc Tornado has cookie attribute injection via .RequestHandler.set_cookie Fixed: 6.5.5 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-qjxf-f2mg-c6mc Tornado is vulnerable to DoS due to too many multipart parts Fixed: 6.5.5 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-78cv-mqj4-43f7 Tornado has incomplete validation of cookie attributes Fixed: 6.5.5 · Subproject dependency evidence; installed when that workspace/package is used.
urllib3	2.3.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/urllib3@2.3.0	HIGH 5 exact-version OSV advisories
Choose a graph for urllib3@2.3.0 5 advisories HIGH GHSA-2xpw-w6gg-jr37 urllib3 streaming API improperly handles highly compressed data Fixed: 2.6.0 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-38jv-5279-wg99 Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) Fixed: 2.6.3 · Subproject dependency evidence; installed when that workspace/package is used. HIGH GHSA-gm62-xv2j-4w53 urllib3 allows an unbounded number of links in the decompression chain Fixed: 2.6.0 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-48p4-8xcf-vxj5 urllib3 does not control redirects in browsers and Node.js Fixed: 2.5.0 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-pq67-6m6q-mj2v urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation Fixed: 2.5.0 · Subproject dependency evidence; installed when that workspace/package is used.
filelock	3.20.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/filelock@3.20.0	MEDIUM 2 exact-version OSV advisories
Choose a graph for filelock@3.20.0 2 advisories MEDIUM GHSA-qmgc-5h2g-mvrw filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock Fixed: 3.20.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-w853-jp5j-5j7f filelock has a TOCTOU race condition which allows symlink attacks during lock file creation Fixed: 3.20.1 · Subproject dependency evidence; installed when that workspace/package is used.
pytest	9.0.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/pytest@9.0.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for pytest@9.0.1 1 advisory MEDIUM GHSA-6w46-j5rx-g56g pytest has vulnerable tmpdir handling Fixed: 9.0.3 · Subproject dependency evidence; installed when that workspace/package is used.
pytest	8.4.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pytest@8.4.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for pytest@8.4.0 1 advisory MEDIUM GHSA-6w46-j5rx-g56g pytest has vulnerable tmpdir handling Fixed: 9.0.3 · Subproject dependency evidence; installed when that workspace/package is used.
python-dotenv	1.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/python-dotenv@1.1.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for python-dotenv@1.1.0 1 advisory MEDIUM GHSA-mf9w-mj56-hr94 python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback Fixed: 1.2.2 · Subproject dependency evidence; installed when that workspace/package is used.
requests	2.32.3	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/swelancer/requirements.txt project/swelancer/uv.lock	pkg:pypi/requests@2.32.3	MEDIUM 2 exact-version OSV advisories
Choose a graph for requests@2.32.3 2 advisories MEDIUM GHSA-9hjg-9r4m-mvj7 Requests vulnerable to .netrc credentials leak via malicious URLs Fixed: 2.32.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-gc5v-m9x4-r6x2 Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function Fixed: 2.33.0 · Subproject dependency evidence; installed when that workspace/package is used.
python-dotenv	1.2.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/python-dotenv@1.2.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for python-dotenv@1.2.1 1 advisory MEDIUM GHSA-mf9w-mj56-hr94 python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback Fixed: 1.2.2 · Subproject dependency evidence; installed when that workspace/package is used.
ansible	11.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/ansible@11.1.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for ansible@11.1.0 1 advisory MEDIUM GHSA-8ggh-xwr9-3373 Ansible Community General Collection is vulnerable to exposure of sensitive information Fixed: 12.2.0 · Subproject dependency evidence; installed when that workspace/package is used.
pypdf	5.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/pypdf@5.1.0	MEDIUM 22 exact-version OSV advisories
Choose a graph for pypdf@5.1.0 22 advisories MEDIUM GHSA-2q4j-m29v-hq73 pypdf has possible Infinite Loop when processing outlines/bookmarks Fixed: 6.6.2 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-3crg-w4f6-42mx pypdf: Manipulated XMP metadata entity declarations can exhaust RAM Fixed: 6.10.0 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-4pxv-j86v-mhcw pypdf: Possible long runtimes for wrong size values in incremental mode Fixed: 6.10.2 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-7gw9-cf7v-778f pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM Fixed: 6.10.2 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-7hfw-26vp-jp8m PyPDF's Manipulated FlateDecode streams can exhaust RAM Fixed: 6.0.0 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-87mj-5ggw-8qc3 pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream Fixed: 6.9.2 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-996q-pr4m-cvgq pypdf has a possible infinite loop when processing TreeObject Fixed: 6.7.1 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-9m86-7pmv-2852 pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams Fixed: 6.7.5 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-9mvc-8737-8j8h pypdf possibly has long runtimes for malformed FlateDecode streams Fixed: 6.7.1 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-f2v5-7jq9-h8cg pypdf: Manipulated RunLengthDecode streams can exhaust RAM Fixed: 6.7.4 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-hqmh-ppp3-xvm7 pypdf: manipulated stream length values can exhaust RAM Fixed: 6.8.0 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-jfx9-29x2-rv3j pypdf can exhaust RAM via manipulated LZWDecode streams Fixed: 6.1.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-jj6c-8h6c-hppx pypdf has long runtimes for wrong size values in cross-reference and object streams Fixed: 6.10.1 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-m449-cwjh-6pw7 pypdf's LZWDecode streams be manipulated to exhaust RAM Fixed: 6.4.0 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-qpxp-75px-xjcp pypdf has inefficient decoding of array-based streams Fixed: 6.9.1 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-vr63-x8vc-m265 pypdf possibly loops infinitely when reading DCT inline images without EOF marker Fixed: 6.1.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-wgvp-vg3v-2xq3 pypdf has possible long runtimes/large memory usage for large /ToUnicode streams Fixed: 6.7.1 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-x284-j5p8-9c5p pypdf: Manipulated FlateDecode image dimensions can exhaust RAM Fixed: 6.10.2 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-x7hp-r3qg-r3cj pypdf: Manipulated FlateDecode XFA streams can exhaust RAM Fixed: 6.7.3 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-2rw7-x74f-jg35 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams Fixed: 6.7.2 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-4f6g-68pf-7vhv pypdf has possible long runtimes for malformed startxref Fixed: 6.6.0 · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-4xc4-762w-m6cg pypdf has possible long runtimes for missing /Root object with large /Size values Fixed: 6.6.0 · Subproject dependency evidence; installed when that workspace/package is used.
pytest	8.3.5	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pytest@8.3.5	MEDIUM 1 exact-version OSV advisory
Choose a graph for pytest@8.3.5 1 advisory MEDIUM GHSA-6w46-j5rx-g56g pytest has vulnerable tmpdir handling Fixed: 9.0.3 · Subproject dependency evidence; installed when that workspace/package is used.
python-dotenv	1.0.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/python-dotenv@1.0.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for python-dotenv@1.0.1 1 advisory MEDIUM GHSA-mf9w-mj56-hr94 python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback Fixed: 1.2.2 · Subproject dependency evidence; installed when that workspace/package is used.
requests	2.32.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/requests@2.32.5	MEDIUM 1 exact-version OSV advisory
Choose a graph for requests@2.32.5 1 advisory MEDIUM GHSA-gc5v-m9x4-r6x2 Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function Fixed: 2.33.0 · Subproject dependency evidence; installed when that workspace/package is used.
virtualenv	20.35.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/virtualenv@20.35.4	MEDIUM 1 exact-version OSV advisory
Choose a graph for virtualenv@20.35.4 1 advisory MEDIUM GHSA-597g-3phw-6986 virtualenv Has TOCTOU Vulnerabilities in Directory Creation Fixed: 20.36.1 · Subproject dependency evidence; installed when that workspace/package is used.
werkzeug	3.1.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/werkzeug@3.1.4	MEDIUM 2 exact-version OSV advisories
Choose a graph for werkzeug@3.1.4 2 advisories MEDIUM GHSA-29vq-49wr-vm6x Werkzeug safe_join() allows Windows special device names Fixed: 3.1.6 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-87hc-h4r5-73f7 Werkzeug safe_join() allows Windows special device names with compound extensions Fixed: 3.1.5 · Subproject dependency evidence; installed when that workspace/package is used.
filelock	3.18.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/filelock@3.18.0	MEDIUM 2 exact-version OSV advisories
Choose a graph for filelock@3.18.0 2 advisories MEDIUM GHSA-qmgc-5h2g-mvrw filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock Fixed: 3.20.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-w853-jp5j-5j7f filelock has a TOCTOU race condition which allows symlink attacks during lock file creation Fixed: 3.20.1 · Subproject dependency evidence; installed when that workspace/package is used.
fonttools	4.58.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/fonttools@4.58.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for fonttools@4.58.1 1 advisory MEDIUM GHSA-768j-98cg-p3fv fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib Fixed: 4.60.2 · Subproject dependency evidence; installed when that workspace/package is used.
pip	25.1.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pip@25.1.1	MEDIUM 3 exact-version OSV advisories
Choose a graph for pip@25.1.1 3 advisories MEDIUM GHSA-4xh5-x5gv-qwph pip's fallback tar extraction doesn't check symbolic links point to extraction directory Fixed: 25.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-58qw-9mgm-455v pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files Fixed: Unknown · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-6vgw-5pg2-w6jp pip Path Traversal vulnerability Fixed: 26.0 · Subproject dependency evidence; installed when that workspace/package is used.
sqlparse	0.5.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/sqlparse@0.5.3	MEDIUM 1 exact-version OSV advisory
Choose a graph for sqlparse@0.5.3 1 advisory MEDIUM GHSA-27jp-wm6q-gp25 sqlparse: formatting list of tuples leads to denial of service Fixed: 0.5.4 · Subproject dependency evidence; installed when that workspace/package is used.
streamlit	1.45.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/streamlit@1.45.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for streamlit@1.45.1 1 advisory MEDIUM GHSA-7p48-42j8-8846 Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure) Fixed: 1.54.0 · Subproject dependency evidence; installed when that workspace/package is used.
virtualenv	20.31.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/virtualenv@20.31.2	MEDIUM 1 exact-version OSV advisory
Choose a graph for virtualenv@20.31.2 1 advisory MEDIUM GHSA-597g-3phw-6986 virtualenv Has TOCTOU Vulnerabilities in Directory Creation Fixed: 20.36.1 · Subproject dependency evidence; installed when that workspace/package is used.
pip	25.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/pip@25.3	MEDIUM 2 exact-version OSV advisories
Choose a graph for pip@25.3 2 advisories MEDIUM GHSA-58qw-9mgm-455v pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files Fixed: Unknown · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-6vgw-5pg2-w6jp pip Path Traversal vulnerability Fixed: 26.0 · Subproject dependency evidence; installed when that workspace/package is used.
streamlit	1.51.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/streamlit@1.51.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for streamlit@1.51.0 1 advisory MEDIUM GHSA-7p48-42j8-8846 Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure) Fixed: 1.54.0 · Subproject dependency evidence; installed when that workspace/package is used.
filelock	3.17.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/filelock@3.17.0	MEDIUM 2 exact-version OSV advisories
Choose a graph for filelock@3.17.0 2 advisories MEDIUM GHSA-qmgc-5h2g-mvrw filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock Fixed: 3.20.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-w853-jp5j-5j7f filelock has a TOCTOU race condition which allows symlink attacks during lock file creation Fixed: 3.20.1 · Subproject dependency evidence; installed when that workspace/package is used.
fonttools	4.56.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/fonttools@4.56.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for fonttools@4.56.0 1 advisory MEDIUM GHSA-768j-98cg-p3fv fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib Fixed: 4.60.2 · Subproject dependency evidence; installed when that workspace/package is used.
jinja2	3.1.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/jinja2@3.1.5	MEDIUM 1 exact-version OSV advisory
Choose a graph for jinja2@3.1.5 1 advisory MEDIUM GHSA-cpwx-vrp4-4pq7 Jinja2 vulnerable to sandbox breakout through attr filter selecting format method Fixed: 3.1.6 · Subproject dependency evidence; installed when that workspace/package is used.
pip	25.0.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pip@25.0.1	MEDIUM 3 exact-version OSV advisories
Choose a graph for pip@25.0.1 3 advisories MEDIUM GHSA-4xh5-x5gv-qwph pip's fallback tar extraction doesn't check symbolic links point to extraction directory Fixed: 25.3 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-58qw-9mgm-455v pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files Fixed: Unknown · Subproject dependency evidence; installed when that workspace/package is used. LOW GHSA-6vgw-5pg2-w6jp pip Path Traversal vulnerability Fixed: 26.0 · Subproject dependency evidence; installed when that workspace/package is used.
streamlit	1.42.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/streamlit@1.42.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for streamlit@1.42.0 1 advisory MEDIUM GHSA-7p48-42j8-8846 Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure) Fixed: 1.54.0 · Subproject dependency evidence; installed when that workspace/package is used.
werkzeug	3.1.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/werkzeug@3.1.3	MEDIUM 3 exact-version OSV advisories
Choose a graph for werkzeug@3.1.3 3 advisories MEDIUM GHSA-29vq-49wr-vm6x Werkzeug safe_join() allows Windows special device names Fixed: 3.1.6 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-87hc-h4r5-73f7 Werkzeug safe_join() allows Windows special device names with compound extensions Fixed: 3.1.5 · Subproject dependency evidence; installed when that workspace/package is used. MEDIUM GHSA-hgf8-39gv-g3f2 Werkzeug safe_join() allows Windows special device names Fixed: 3.1.4 · Subproject dependency evidence; installed when that workspace/package is used.
flask	3.1.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/flask@3.1.2	LOW 1 exact-version OSV advisory
Choose a graph for flask@3.1.2 1 advisory LOW GHSA-68rp-wp8r-4726 Flask session does not add `Vary: Cookie` header when accessed in some ways Fixed: 3.1.3 · Subproject dependency evidence; installed when that workspace/package is used.
flask	3.1.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/flask@3.1.1	LOW 1 exact-version OSV advisory
Choose a graph for flask@3.1.1 1 advisory LOW GHSA-68rp-wp8r-4726 Flask session does not add `Vary: Cookie` header when accessed in some ways Fixed: 3.1.3 · Subproject dependency evidence; installed when that workspace/package is used.
pygments	2.19.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/pygments@2.19.2	LOW 1 exact-version OSV advisory
Choose a graph for pygments@2.19.2 1 advisory LOW GHSA-5239-wwwm-4pmq Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching Fixed: 2.20.0 · Subproject dependency evidence; installed when that workspace/package is used.
pygments	2.19.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/pygments@2.19.1	LOW 1 exact-version OSV advisory
Choose a graph for pygments@2.19.1 1 advisory LOW GHSA-5239-wwwm-4pmq Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching Fixed: 2.20.0 · Subproject dependency evidence; installed when that workspace/package is used.
async-lru		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/pyproject.toml project/swelancer/requirements.txt	pkg:pypi/async-lru	Unverified No exact installed version; not treated as vulnerable
asyncvnc		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/pyproject.toml project/swelancer/requirements.txt	pkg:pypi/asyncvnc	Unverified No exact installed version; not treated as vulnerable
azure-identity		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/azure-identity	Unverified No exact installed version; not treated as vulnerable
azure-mgmt-compute		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/azure-mgmt-compute	Unverified No exact installed version; not treated as vulnerable
azure-mgmt-network		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/azure-mgmt-network	Unverified No exact installed version; not treated as vulnerable
blobfile		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/pyproject.toml project/evmbench/pyproject.toml project/paperbench/pyproject.toml + 1 more	pkg:pypi/blobfile	Unverified No exact installed version; not treated as vulnerable
docker		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/pyproject.toml project/evmbench/pyproject.toml project/paperbench/pyproject.toml + 1 more	pkg:pypi/docker	Unverified No exact installed version; not treated as vulnerable
fastapi		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/fastapi	Unverified No exact installed version; not treated as vulnerable
filelock		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/filelock	Unverified No exact installed version; not treated as vulnerable
httpx		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/httpx	Unverified No exact installed version; not treated as vulnerable
ipykernel		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/ipykernel	Unverified No exact installed version; not treated as vulnerable
jupyter-client		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/pyproject.toml project/swelancer/requirements.txt	pkg:pypi/jupyter-client	Unverified No exact installed version; not treated as vulnerable
msgpack		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/msgpack	Unverified No exact installed version; not treated as vulnerable
openai		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/pyproject.toml project/evmbench/pyproject.toml project/paperbench/pyproject.toml + 1 more	pkg:pypi/openai	Unverified No exact installed version; not treated as vulnerable
pillow		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/pyproject.toml project/swelancer/requirements.txt	pkg:pypi/pillow	Unverified No exact installed version; not treated as vulnerable
pydantic		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/pyproject.toml project/common/compatibility_api/pyproject.toml	pkg:pypi/pydantic	Unverified No exact installed version; not treated as vulnerable
pytest		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/pytest	Unverified No exact installed version; not treated as vulnerable
pytest-asyncio		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/pyproject.toml project/evmbench/pyproject.toml	pkg:pypi/pytest-asyncio	Unverified No exact installed version; not treated as vulnerable
pyyaml		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/pyproject.toml project/evmbench/pyproject.toml project/paperbench/pyproject.toml + 1 more	pkg:pypi/pyyaml	Unverified No exact installed version; not treated as vulnerable
rich		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/pyproject.toml	pkg:pypi/rich	Unverified No exact installed version; not treated as vulnerable
structlog		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/pyproject.toml project/evmbench/pyproject.toml project/paperbench/pyproject.toml + 1 more	pkg:pypi/structlog	Unverified No exact installed version; not treated as vulnerable
tenacity		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/pyproject.toml project/evmbench/pyproject.toml project/paperbench/pyproject.toml + 1 more	pkg:pypi/tenacity	Unverified No exact installed version; not treated as vulnerable
vncdotool		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/pyproject.toml project/swelancer/requirements.txt	pkg:pypi/vncdotool	Unverified No exact installed version; not treated as vulnerable
chz		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/compatibility_api/pyproject.toml project/evmbench/pyproject.toml project/paperbench/pyproject.toml	pkg:pypi/chz	Unverified No exact installed version; not treated as vulnerable
nanoeval		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/compatibility_api/pyproject.toml project/evmbench/pyproject.toml project/paperbench/pyproject.toml + 1 more	pkg:pypi/nanoeval	Unverified No exact installed version; not treated as vulnerable
alcatraz		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/pyproject.toml project/paperbench/pyproject.toml project/swelancer/pyproject.toml	pkg:pypi/alcatraz	Unverified No exact installed version; not treated as vulnerable
compatibility-api		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/pyproject.toml	pkg:pypi/compatibility-api	Unverified No exact installed version; not treated as vulnerable
matplotlib		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/pyproject.toml	pkg:pypi/matplotlib	Unverified No exact installed version; not treated as vulnerable
nanoeval-alcatraz		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/pyproject.toml project/paperbench/pyproject.toml project/swelancer/pyproject.toml	pkg:pypi/nanoeval-alcatraz	Unverified No exact installed version; not treated as vulnerable
pre-commit		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/pyproject.toml	pkg:pypi/pre-commit	Unverified No exact installed version; not treated as vulnerable
preparedness-turn-completer		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/pyproject.toml project/paperbench/pyproject.toml	pkg:pypi/preparedness-turn-completer	Unverified No exact installed version; not treated as vulnerable
pytest-html		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/pyproject.toml	pkg:pypi/pytest-html	Unverified No exact installed version; not treated as vulnerable
python-dateutil		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/pyproject.toml project/paperbench/pyproject.toml	pkg:pypi/python-dateutil	Unverified No exact installed version; not treated as vulnerable
python-dotenv		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/pyproject.toml project/paperbench/pyproject.toml project/swelancer/pyproject.toml	pkg:pypi/python-dotenv	Unverified No exact installed version; not treated as vulnerable
tiktoken		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/pyproject.toml project/paperbench/pyproject.toml project/swelancer/pyproject.toml	pkg:pypi/tiktoken	Unverified No exact installed version; not treated as vulnerable
tqdm		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/pyproject.toml project/paperbench/pyproject.toml	pkg:pypi/tqdm	Unverified No exact installed version; not treated as vulnerable
drain3		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/pyproject.toml	pkg:pypi/drain3	Unverified No exact installed version; not treated as vulnerable
flask		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/paperbench/pyproject.toml project/swelancer/pyproject.toml	pkg:pypi/flask	Unverified No exact installed version; not treated as vulnerable
pandas		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/paperbench/pyproject.toml project/swelancer/requirements.txt	pkg:pypi/pandas	Unverified No exact installed version; not treated as vulnerable
pandas-stubs		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/pyproject.toml	pkg:pypi/pandas-stubs	Unverified No exact installed version; not treated as vulnerable
scikit-learn		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/pyproject.toml	pkg:pypi/scikit-learn	Unverified No exact installed version; not treated as vulnerable
unidecode		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/pyproject.toml	pkg:pypi/unidecode	Unverified No exact installed version; not treated as vulnerable
aiodebug		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/aiodebug	Unverified No exact installed version; not treated as vulnerable
aiomonitor		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/aiomonitor	Unverified No exact installed version; not treated as vulnerable
boostedblob		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/boostedblob	Unverified No exact installed version; not treated as vulnerable
dill		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/dill	Unverified No exact installed version; not treated as vulnerable
ipython		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/ipython	Unverified No exact installed version; not treated as vulnerable
loky		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/loky	Unverified No exact installed version; not treated as vulnerable
psutil		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/psutil	Unverified No exact installed version; not treated as vulnerable
pyarrow		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/pyarrow	Unverified No exact installed version; not treated as vulnerable
service-identity		PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/service-identity	Unverified No exact installed version; not treated as vulnerable

Clear Dependencies 372 packages hidden Show clear packagesHide clear packages

Component	Version	Ecosystem	Scope	Exposure	Source	Package URL	Status
async-lru	2.0.5	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/async-lru@2.0.5	Clear No OSV advisories for this exact version
asyncvnc	1.3.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/asyncvnc@1.3.0	Clear No OSV advisories for this exact version
azure-identity	1.25.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/azure-identity@1.25.1	Clear No OSV advisories for this exact version
azure-mgmt-compute	37.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/azure-mgmt-compute@37.1.0	Clear No OSV advisories for this exact version
azure-mgmt-network	30.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/azure-mgmt-network@30.1.0	Clear No OSV advisories for this exact version
blobfile	3.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/blobfile@3.1.0	Clear No OSV advisories for this exact version
chz	0.4.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/chz@0.4.0	Clear No OSV advisories for this exact version
docker	7.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/docker@7.1.0	Clear No OSV advisories for this exact version
fastapi	0.123.3	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/fastapi@0.123.3	Clear No OSV advisories for this exact version
httpx	0.28.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	5 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 2 more	pkg:pypi/httpx@0.28.1	Clear No OSV advisories for this exact version
ipykernel	7.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/ipykernel@7.1.0	Clear No OSV advisories for this exact version
jupyter-client	8.6.3	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/jupyter-client@8.6.3	Clear No OSV advisories for this exact version
msgpack	1.1.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/msgpack@1.1.2	Clear No OSV advisories for this exact version
mypy	1.18.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/mypy@1.18.2	Clear No OSV advisories for this exact version
openai	2.8.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/openai@2.8.1	Clear No OSV advisories for this exact version
poethepoet	0.38.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/poethepoet@0.38.0	Clear No OSV advisories for this exact version
pre-commit	4.5.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/pre-commit@4.5.0	Clear No OSV advisories for this exact version
pydantic	2.12.5	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/pydantic@2.12.5	Clear No OSV advisories for this exact version
pylint	4.0.4	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/pylint@4.0.4	Clear No OSV advisories for this exact version
pytest-asyncio	1.3.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/pytest-asyncio@1.3.0	Clear No OSV advisories for this exact version
python-dateutil	2.9.0.post0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/python-dateutil@2.9.0.post0	Clear No OSV advisories for this exact version
pyyaml	6.0.3	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/pyyaml@6.0.3	Clear No OSV advisories for this exact version
rich	14.2.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/rich@14.2.0	Clear No OSV advisories for this exact version
ruff	0.14.7	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/ruff@0.14.7	Clear No OSV advisories for this exact version
structlog	25.5.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/structlog@25.5.0	Clear No OSV advisories for this exact version
tenacity	9.1.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 1 more	pkg:pypi/tenacity@9.1.2	Clear No OSV advisories for this exact version
tqdm	4.67.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	5 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 2 more	pkg:pypi/tqdm@4.67.1	Clear No OSV advisories for this exact version
types-docker	7.1.0.20251009	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/types-docker@7.1.0.20251009	Clear No OSV advisories for this exact version
vncdotool	1.2.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/vncdotool@1.2.0	Clear No OSV advisories for this exact version
mypy	1.19.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/mypy@1.19.0	Clear No OSV advisories for this exact version
openai	1.99.9	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/openai@1.99.9	Clear No OSV advisories for this exact version
pytest-xdist	3.8.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/pytest-xdist@3.8.0	Clear No OSV advisories for this exact version
ruff	0.14.6	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/preparedness_turn_completer/uv.lock	pkg:pypi/ruff@0.14.6	Clear No OSV advisories for this exact version
tiktoken	0.12.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/tiktoken@0.12.0	Clear No OSV advisories for this exact version
alcatraz	0.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/alcatraz@0.1.0	Clear No OSV advisories for this exact version
blobfile	3.0.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/blobfile@3.0.0	Clear No OSV advisories for this exact version
chz	0.3.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/chz@0.3.0	Clear No OSV advisories for this exact version
compatibility-api	0.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/compatibility-api@0.1.0	Clear No OSV advisories for this exact version
matplotlib	3.10.3	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/matplotlib@3.10.3	Clear No OSV advisories for this exact version
mypy	1.16.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/mypy@1.16.0	Clear No OSV advisories for this exact version
nanoeval	0.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/nanoeval@0.1.0	Clear No OSV advisories for this exact version
nanoeval-alcatraz	0.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/nanoeval-alcatraz@0.1.0	Clear No OSV advisories for this exact version
pre-commit	4.2.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/pre-commit@4.2.0	Clear No OSV advisories for this exact version
preparedness-turn-completer	0.1.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/preparedness-turn-completer@0.1.0	Clear No OSV advisories for this exact version
pytest-asyncio	1.0.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pytest-asyncio@1.0.0	Clear No OSV advisories for this exact version
pytest-html	4.1.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/pytest-html@4.1.1	Clear No OSV advisories for this exact version
pytest-xdist	3.7.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pytest-xdist@3.7.0	Clear No OSV advisories for this exact version
pyyaml	6.0.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/pyyaml@6.0.2	Clear No OSV advisories for this exact version
ruff	0.11.12	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/ruff@0.11.12	Clear No OSV advisories for this exact version
structlog	25.4.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/structlog@25.4.0	Clear No OSV advisories for this exact version
tiktoken	0.9.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/tiktoken@0.9.0	Clear No OSV advisories for this exact version
drain3	0.9.11	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/drain3@0.9.11	Clear No OSV advisories for this exact version
pandas	2.3.3	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/pandas@2.3.3	Clear No OSV advisories for this exact version
pandas-stubs	2.3.3.251201	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/pandas-stubs@2.3.3.251201	Clear No OSV advisories for this exact version
scikit-learn	1.7.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/scikit-learn@1.7.2	Clear No OSV advisories for this exact version
unidecode	1.4.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/unidecode@1.4.0	Clear No OSV advisories for this exact version
asyncio	3.4.3	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/asyncio@3.4.3	Clear No OSV advisories for this exact version
beautifulsoup4	4.12.3	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/beautifulsoup4@4.12.3	Clear No OSV advisories for this exact version
libcst	1.5.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/libcst@1.5.1	Clear No OSV advisories for this exact version
moviepy	2.1.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/moviepy@2.1.1	Clear No OSV advisories for this exact version
numpy	2.2.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/numpy@2.2.1	Clear No OSV advisories for this exact version
pipx	1.7.1	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/pipx@1.7.1	Clear No OSV advisories for this exact version
playwright	1.47.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/playwright@1.47.0	Clear No OSV advisories for this exact version
pusher	3.3.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/pusher@3.3.2	Clear No OSV advisories for this exact version
pyotp	2.9.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/pyotp@2.9.0	Clear No OSV advisories for this exact version
pyperclip	1.9.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/pyperclip@1.9.0	Clear No OSV advisories for this exact version
pytest-asyncio	0.25.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/pytest-asyncio@0.25.0	Clear No OSV advisories for this exact version
pytest-playwright	0.6.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/pytest-playwright@0.6.2	Clear No OSV advisories for this exact version
reportlab	4.2.5	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/reportlab@4.2.5	Clear No OSV advisories for this exact version
requests-toolbelt	1.0.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/requirements.txt	pkg:pypi/requests-toolbelt@1.0.0	Clear No OSV advisories for this exact version
playwright	1.52.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/playwright@1.52.0	Clear No OSV advisories for this exact version
poethepoet	0.34.0	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/poethepoet@0.34.0	Clear No OSV advisories for this exact version
pytest-subtests	0.14.2	PyPI	Direct	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pytest-subtests@0.14.2	Clear No OSV advisories for this exact version
annotated-doc	0.0.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/annotated-doc@0.0.4	Clear No OSV advisories for this exact version
annotated-types	0.7.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	5 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 2 more	pkg:pypi/annotated-types@0.7.0	Clear No OSV advisories for this exact version
anyio	4.12.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/anyio@4.12.0	Clear No OSV advisories for this exact version
appnope	0.1.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/appnope@0.1.4	Clear No OSV advisories for this exact version
astroid	4.0.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/astroid@4.0.2	Clear No OSV advisories for this exact version
asttokens	3.0.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/asttokens@3.0.1	Clear No OSV advisories for this exact version
attrs	25.4.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/attrs@25.4.0	Clear No OSV advisories for this exact version
automat	25.4.16	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/automat@25.4.16	Clear No OSV advisories for this exact version
azure-mgmt-core	1.6.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/azure-mgmt-core@1.6.0	Clear No OSV advisories for this exact version
blinker	1.9.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/blinker@1.9.0	Clear No OSV advisories for this exact version
certifi	2025.11.12	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/certifi@2025.11.12	Clear No OSV advisories for this exact version
cffi	2.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/cffi@2.0.0	Clear No OSV advisories for this exact version
cfgv	3.5.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/cfgv@3.5.0	Clear No OSV advisories for this exact version
charset-normalizer	3.4.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/charset-normalizer@3.4.4	Clear No OSV advisories for this exact version
click	8.3.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/click@8.3.1	Clear No OSV advisories for this exact version
colorama	0.4.6	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	5 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 2 more	pkg:pypi/colorama@0.4.6	Clear No OSV advisories for this exact version
comm	0.2.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/comm@0.2.3	Clear No OSV advisories for this exact version
constantly	23.10.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/constantly@23.10.4	Clear No OSV advisories for this exact version
debugpy	1.8.17	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/debugpy@1.8.17	Clear No OSV advisories for this exact version
decorator	5.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/decorator@5.2.1	Clear No OSV advisories for this exact version
dill	0.4.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/dill@0.4.0	Clear No OSV advisories for this exact version
distlib	0.4.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/distlib@0.4.0	Clear No OSV advisories for this exact version
distro	1.9.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	5 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 2 more	pkg:pypi/distro@1.9.0	Clear No OSV advisories for this exact version
executing	2.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/executing@2.2.1	Clear No OSV advisories for this exact version
h11	0.16.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 1 more	pkg:pypi/h11@0.16.0	Clear No OSV advisories for this exact version
httpcore	1.0.9	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 1 more	pkg:pypi/httpcore@1.0.9	Clear No OSV advisories for this exact version
hyperlink	21.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/hyperlink@21.0.0	Clear No OSV advisories for this exact version
identify	2.6.15	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/identify@2.6.15	Clear No OSV advisories for this exact version
idna	3.11	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/idna@3.11	Clear No OSV advisories for this exact version
incremental	24.11.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/incremental@24.11.0	Clear No OSV advisories for this exact version
iniconfig	2.3.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/iniconfig@2.3.0	Clear No OSV advisories for this exact version
ipython	9.7.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/ipython@9.7.0	Clear No OSV advisories for this exact version
ipython-pygments-lexers	1.1.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/ipython-pygments-lexers@1.1.1	Clear No OSV advisories for this exact version
ipywidgets	8.1.8	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/ipywidgets@8.1.8	Clear No OSV advisories for this exact version
isodate	0.7.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/isodate@0.7.2	Clear No OSV advisories for this exact version
isort	7.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/isort@7.0.0	Clear No OSV advisories for this exact version
itsdangerous	2.2.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/itsdangerous@2.2.0	Clear No OSV advisories for this exact version
jedi	0.19.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/jedi@0.19.2	Clear No OSV advisories for this exact version
jinja2	3.1.6	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/jinja2@3.1.6	Clear No OSV advisories for this exact version
jiter	0.12.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/jiter@0.12.0	Clear No OSV advisories for this exact version
jupyter-core	5.9.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/jupyter-core@5.9.1	Clear No OSV advisories for this exact version
jupyterlab-widgets	3.0.16	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/jupyterlab-widgets@3.0.16	Clear No OSV advisories for this exact version
keysymdef	1.2.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/keysymdef@1.2.0	Clear No OSV advisories for this exact version
markdown-it-py	4.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/markdown-it-py@4.0.0	Clear No OSV advisories for this exact version
markupsafe	3.0.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/markupsafe@3.0.3	Clear No OSV advisories for this exact version
matplotlib-inline	0.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/matplotlib-inline@0.2.1	Clear No OSV advisories for this exact version
mccabe	0.7.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/mccabe@0.7.0	Clear No OSV advisories for this exact version
mdurl	0.1.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/mdurl@0.1.2	Clear No OSV advisories for this exact version
msal	1.34.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/msal@1.34.0	Clear No OSV advisories for this exact version
msal-extensions	1.3.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/msal-extensions@1.3.1	Clear No OSV advisories for this exact version
msrest	0.7.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/msrest@0.7.1	Clear No OSV advisories for this exact version
mypy-extensions	1.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	5 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 2 more	pkg:pypi/mypy-extensions@1.1.0	Clear No OSV advisories for this exact version
nest-asyncio	1.6.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/nest-asyncio@1.6.0	Clear No OSV advisories for this exact version
nodeenv	1.9.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	5 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 2 more	pkg:pypi/nodeenv@1.9.1	Clear No OSV advisories for this exact version
numpy	2.3.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/numpy@2.3.5	Clear No OSV advisories for this exact version
oauthlib	3.3.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/oauthlib@3.3.1	Clear No OSV advisories for this exact version
packaging	25.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/packaging@25.0	Clear No OSV advisories for this exact version
parso	0.8.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/parso@0.8.5	Clear No OSV advisories for this exact version
pastel	0.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/pastel@0.2.1	Clear No OSV advisories for this exact version
pathspec	0.12.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	5 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 2 more	pkg:pypi/pathspec@0.12.1	Clear No OSV advisories for this exact version
pexpect	4.9.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/pexpect@4.9.0	Clear No OSV advisories for this exact version
platformdirs	4.5.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/platformdirs@4.5.0	Clear No OSV advisories for this exact version
pluggy	1.6.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 1 more	pkg:pypi/pluggy@1.6.0	Clear No OSV advisories for this exact version
prompt-toolkit	3.0.52	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/prompt-toolkit@3.0.52	Clear No OSV advisories for this exact version
psutil	7.1.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/psutil@7.1.3	Clear No OSV advisories for this exact version
ptyprocess	0.7.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/ptyprocess@0.7.0	Clear No OSV advisories for this exact version
pure-eval	0.2.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/pure-eval@0.2.3	Clear No OSV advisories for this exact version
pycparser	2.23	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/pycparser@2.23	Clear No OSV advisories for this exact version
pycryptodomex	3.23.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/pycryptodomex@3.23.0	Clear No OSV advisories for this exact version
pydantic-core	2.41.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/pydantic-core@2.41.5	Clear No OSV advisories for this exact version
pywin32	311	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/pywin32@311	Clear No OSV advisories for this exact version
pyzmq	27.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/pyzmq@27.1.0	Clear No OSV advisories for this exact version
requests-oauthlib	2.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/requests-oauthlib@2.0.0	Clear No OSV advisories for this exact version
six	1.17.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/six@1.17.0	Clear No OSV advisories for this exact version
sniffio	1.3.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	5 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/evmbench/uv.lock + 2 more	pkg:pypi/sniffio@1.3.1	Clear No OSV advisories for this exact version
stack-data	0.6.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/stack-data@0.6.3	Clear No OSV advisories for this exact version
starlette	0.50.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/starlette@0.50.0	Clear No OSV advisories for this exact version
tomlkit	0.13.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/tomlkit@0.13.3	Clear No OSV advisories for this exact version
traitlets	5.14.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	4 files project/common/alcatraz/uv.lock project/evmbench/uv.lock project/paperbench/uv.lock + 1 more	pkg:pypi/traitlets@5.14.3	Clear No OSV advisories for this exact version
twisted	25.5.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/twisted@25.5.0	Clear No OSV advisories for this exact version
types-paramiko	4.0.0.20250822	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/types-paramiko@4.0.0.20250822	Clear No OSV advisories for this exact version
types-requests	2.32.4.20250913	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/alcatraz/uv.lock	pkg:pypi/types-requests@2.32.4.20250913	Clear No OSV advisories for this exact version
typing-extensions	4.15.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/typing-extensions@4.15.0	Clear No OSV advisories for this exact version
typing-inspection	0.4.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/common/alcatraz/uv.lock project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/typing-inspection@0.4.2	Clear No OSV advisories for this exact version
wcwidth	0.2.14	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/wcwidth@0.2.14	Clear No OSV advisories for this exact version
widgetsnbextension	4.0.15	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/widgetsnbextension@4.0.15	Clear No OSV advisories for this exact version
zope-interface	8.1.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/alcatraz/uv.lock project/paperbench/uv.lock	pkg:pypi/zope-interface@8.1.1	Clear No OSV advisories for this exact version
anyio	4.11.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/preparedness_turn_completer/uv.lock	pkg:pypi/anyio@4.11.0	Clear No OSV advisories for this exact version
execnet	2.1.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/execnet@2.1.2	Clear No OSV advisories for this exact version
librt	0.6.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/common/preparedness_turn_completer/uv.lock	pkg:pypi/librt@0.6.2	Clear No OSV advisories for this exact version
regex	2025.11.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/common/preparedness_turn_completer/uv.lock project/paperbench/uv.lock	pkg:pypi/regex@2025.11.3	Clear No OSV advisories for this exact version
aioconsole	0.8.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/aioconsole@0.8.1	Clear No OSV advisories for this exact version
aiodebug	2.3.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/aiodebug@2.3.0	Clear No OSV advisories for this exact version
aiohappyeyeballs	2.6.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/aiohappyeyeballs@2.6.1	Clear No OSV advisories for this exact version
aiomonitor	0.7.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/aiomonitor@0.7.1	Clear No OSV advisories for this exact version
aiosignal	1.3.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/aiosignal@1.3.2	Clear No OSV advisories for this exact version
altair	5.5.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/altair@5.5.0	Clear No OSV advisories for this exact version
anyio	4.9.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/anyio@4.9.0	Clear No OSV advisories for this exact version
appdirs	1.4.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/appdirs@1.4.4	Clear No OSV advisories for this exact version
asttokens	3.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/asttokens@3.0.0	Clear No OSV advisories for this exact version
attrs	25.3.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/attrs@25.3.0	Clear No OSV advisories for this exact version
azure-common	1.1.28	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/azure-common@1.1.28	Clear No OSV advisories for this exact version
azure-identity	1.23.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/azure-identity@1.23.0	Clear No OSV advisories for this exact version
azure-mgmt-compute	34.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/azure-mgmt-compute@34.1.0	Clear No OSV advisories for this exact version
azure-mgmt-core	1.5.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/azure-mgmt-core@1.5.0	Clear No OSV advisories for this exact version
azure-mgmt-network	29.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/azure-mgmt-network@29.0.0	Clear No OSV advisories for this exact version
boostedblob	0.15.6	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/boostedblob@0.15.6	Clear No OSV advisories for this exact version
cachetools	5.5.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/cachetools@5.5.2	Clear No OSV advisories for this exact version
certifi	2025.4.26	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/certifi@2025.4.26	Clear No OSV advisories for this exact version
cffi	1.17.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/cffi@1.17.1	Clear No OSV advisories for this exact version
cfgv	3.4.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/cfgv@3.4.0	Clear No OSV advisories for this exact version
charset-normalizer	3.4.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/charset-normalizer@3.4.2	Clear No OSV advisories for this exact version
cli-helpers	2.4.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/cli-helpers@2.4.0	Clear No OSV advisories for this exact version
click	8.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/click@8.2.1	Clear No OSV advisories for this exact version
cloudpickle	3.1.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/cloudpickle@3.1.1	Clear No OSV advisories for this exact version
comm	0.2.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/comm@0.2.2	Clear No OSV advisories for this exact version
configobj	5.0.9	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/configobj@5.0.9	Clear No OSV advisories for this exact version
contourpy	1.3.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/contourpy@1.3.2	Clear No OSV advisories for this exact version
cycler	0.12.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/cycler@0.12.1	Clear No OSV advisories for this exact version
debugpy	1.8.14	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/debugpy@1.8.14	Clear No OSV advisories for this exact version
distlib	0.3.9	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/distlib@0.3.9	Clear No OSV advisories for this exact version
execnet	2.1.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/execnet@2.1.1	Clear No OSV advisories for this exact version
executing	2.2.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/executing@2.2.0	Clear No OSV advisories for this exact version
fastapi	0.115.12	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/fastapi@0.115.12	Clear No OSV advisories for this exact version
frozenlist	1.6.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/frozenlist@1.6.2	Clear No OSV advisories for this exact version
gitdb	4.0.12	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/gitdb@4.0.12	Clear No OSV advisories for this exact version
gitpython	3.1.44	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/gitpython@3.1.44	Clear No OSV advisories for this exact version
identify	2.6.12	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/identify@2.6.12	Clear No OSV advisories for this exact version
idna	3.10	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/idna@3.10	Clear No OSV advisories for this exact version
incremental	24.7.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/incremental@24.7.2	Clear No OSV advisories for this exact version
iniconfig	2.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/iniconfig@2.1.0	Clear No OSV advisories for this exact version
ipykernel	6.29.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/ipykernel@6.29.5	Clear No OSV advisories for this exact version
ipython	9.3.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/ipython@9.3.0	Clear No OSV advisories for this exact version
ipywidgets	8.1.7	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/ipywidgets@8.1.7	Clear No OSV advisories for this exact version
janus	2.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/janus@2.0.0	Clear No OSV advisories for this exact version
jiter	0.10.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/jiter@0.10.0	Clear No OSV advisories for this exact version
jsonschema	4.24.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/jsonschema@4.24.0	Clear No OSV advisories for this exact version
jsonschema-specifications	2025.4.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/jsonschema-specifications@2025.4.1	Clear No OSV advisories for this exact version
jupyter-core	5.8.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/jupyter-core@5.8.1	Clear No OSV advisories for this exact version
jupyterlab-widgets	3.0.15	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/jupyterlab-widgets@3.0.15	Clear No OSV advisories for this exact version
kiwisolver	1.4.8	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/kiwisolver@1.4.8	Clear No OSV advisories for this exact version
litecli	1.15.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/litecli@1.15.0	Clear No OSV advisories for this exact version
loky	3.5.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/loky@3.5.5	Clear No OSV advisories for this exact version
markdown-it-py	3.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/markdown-it-py@3.0.0	Clear No OSV advisories for this exact version
markupsafe	3.0.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/markupsafe@3.0.2	Clear No OSV advisories for this exact version
matplotlib-inline	0.1.7	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/matplotlib-inline@0.1.7	Clear No OSV advisories for this exact version
more-itertools	10.7.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/more-itertools@10.7.0	Clear No OSV advisories for this exact version
msal	1.32.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/msal@1.32.3	Clear No OSV advisories for this exact version
msgpack	1.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/msgpack@1.1.0	Clear No OSV advisories for this exact version
multidict	6.4.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/multidict@6.4.4	Clear No OSV advisories for this exact version
narwhals	1.41.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/narwhals@1.41.0	Clear No OSV advisories for this exact version
numpy	2.2.6	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/numpy@2.2.6	Clear No OSV advisories for this exact version
packaging	24.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/packaging@24.2	Clear No OSV advisories for this exact version
pandas	2.2.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/pandas@2.2.3	Clear No OSV advisories for this exact version
parso	0.8.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/parso@0.8.4	Clear No OSV advisories for this exact version
platformdirs	4.3.8	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/platformdirs@4.3.8	Clear No OSV advisories for this exact version
prompt-toolkit	3.0.51	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/prompt-toolkit@3.0.51	Clear No OSV advisories for this exact version
propcache	0.3.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/propcache@0.3.1	Clear No OSV advisories for this exact version
psutil	7.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/psutil@7.0.0	Clear No OSV advisories for this exact version
ptpython	3.0.30	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/ptpython@3.0.30	Clear No OSV advisories for this exact version
pyarrow	20.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pyarrow@20.0.0	Clear No OSV advisories for this exact version
pycparser	2.22	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/pycparser@2.22	Clear No OSV advisories for this exact version
pydantic	2.11.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pydantic@2.11.5	Clear No OSV advisories for this exact version
pydantic-core	2.33.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pydantic-core@2.33.2	Clear No OSV advisories for this exact version
pydeck	0.9.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/pydeck@0.9.1	Clear No OSV advisories for this exact version
pyparsing	3.2.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pyparsing@3.2.3	Clear No OSV advisories for this exact version
pytest-metadata	3.1.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/pytest-metadata@3.1.1	Clear No OSV advisories for this exact version
pytz	2025.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/pytz@2025.2	Clear No OSV advisories for this exact version
pywin32	310	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pywin32@310	Clear No OSV advisories for this exact version
pyzmq	26.4.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/pyzmq@26.4.0	Clear No OSV advisories for this exact version
referencing	0.36.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/referencing@0.36.2	Clear No OSV advisories for this exact version
regex	2024.11.6	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/regex@2024.11.6	Clear No OSV advisories for this exact version
rich	14.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/rich@14.0.0	Clear No OSV advisories for this exact version
rpds-py	0.25.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/rpds-py@0.25.1	Clear No OSV advisories for this exact version
setuptools	80.9.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/setuptools@80.9.0	Clear No OSV advisories for this exact version
smmap	5.0.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/smmap@5.0.2	Clear No OSV advisories for this exact version
tabulate	0.9.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/tabulate@0.9.0	Clear No OSV advisories for this exact version
telnetlib3	2.0.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/telnetlib3@2.0.4	Clear No OSV advisories for this exact version
terminaltables	3.1.10	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/terminaltables@3.1.10	Clear No OSV advisories for this exact version
toml	0.10.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/toml@0.10.2	Clear No OSV advisories for this exact version
trafaret	2.1.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/trafaret@2.1.1	Clear No OSV advisories for this exact version
twisted	24.11.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/twisted@24.11.0	Clear No OSV advisories for this exact version
typing-extensions	4.13.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/typing-extensions@4.13.2	Clear No OSV advisories for this exact version
typing-inspection	0.4.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/typing-inspection@0.4.1	Clear No OSV advisories for this exact version
tzdata	2025.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/paperbench/uv.lock	pkg:pypi/tzdata@2025.2	Clear No OSV advisories for this exact version
uvloop	0.21.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/uvloop@0.21.0	Clear No OSV advisories for this exact version
watchdog	6.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	3 files project/evmbench/uv.lock project/paperbench/uv.lock project/swelancer/uv.lock	pkg:pypi/watchdog@6.0.0	Clear No OSV advisories for this exact version
wcwidth	0.2.13	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/wcwidth@0.2.13	Clear No OSV advisories for this exact version
widgetsnbextension	4.0.14	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/widgetsnbextension@4.0.14	Clear No OSV advisories for this exact version
yarl	1.20.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/evmbench/uv.lock	pkg:pypi/yarl@1.20.0	Clear No OSV advisories for this exact version
zope-interface	7.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	2 files project/evmbench/uv.lock project/swelancer/uv.lock	pkg:pypi/zope-interface@7.2	Clear No OSV advisories for this exact version
aioconsole	0.8.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/aioconsole@0.8.2	Clear No OSV advisories for this exact version
aiosignal	1.4.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/aiosignal@1.4.0	Clear No OSV advisories for this exact version
boostedblob	1.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/boostedblob@1.0.0	Clear No OSV advisories for this exact version
cachetools	4.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/cachetools@4.2.1	Clear No OSV advisories for this exact version
cli-helpers	2.7.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/cli-helpers@2.7.0	Clear No OSV advisories for this exact version
click-default-group	1.2.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/click-default-group@1.2.4	Clear No OSV advisories for this exact version
cloudpickle	3.1.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/cloudpickle@3.1.2	Clear No OSV advisories for this exact version
condense-json	0.1.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/condense-json@0.1.3	Clear No OSV advisories for this exact version
contourpy	1.3.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/contourpy@1.3.3	Clear No OSV advisories for this exact version
fonttools	4.61.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/fonttools@4.61.0	Clear No OSV advisories for this exact version
frozenlist	1.8.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/frozenlist@1.8.0	Clear No OSV advisories for this exact version
gitpython	3.1.45	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/gitpython@3.1.45	Clear No OSV advisories for this exact version
joblib	1.5.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/joblib@1.5.2	Clear No OSV advisories for this exact version
jsonpickle	1.5.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/jsonpickle@1.5.1	Clear No OSV advisories for this exact version
jsonschema	4.25.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/jsonschema@4.25.1	Clear No OSV advisories for this exact version
jsonschema-specifications	2025.9.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/jsonschema-specifications@2025.9.1	Clear No OSV advisories for this exact version
kiwisolver	1.4.9	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/kiwisolver@1.4.9	Clear No OSV advisories for this exact version
librt	0.6.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/librt@0.6.3	Clear No OSV advisories for this exact version
litecli	1.17.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/litecli@1.17.0	Clear No OSV advisories for this exact version
llm	0.27.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/llm@0.27.1	Clear No OSV advisories for this exact version
loky	3.5.6	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/loky@3.5.6	Clear No OSV advisories for this exact version
matplotlib	3.10.7	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/matplotlib@3.10.7	Clear No OSV advisories for this exact version
more-itertools	10.8.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/more-itertools@10.8.0	Clear No OSV advisories for this exact version
multidict	6.7.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/multidict@6.7.0	Clear No OSV advisories for this exact version
narwhals	2.13.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/narwhals@2.13.0	Clear No OSV advisories for this exact version
propcache	0.4.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/propcache@0.4.1	Clear No OSV advisories for this exact version
ptpython	3.0.32	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/ptpython@3.0.32	Clear No OSV advisories for this exact version
puremagic	1.30	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/puremagic@1.30	Clear No OSV advisories for this exact version
pyarrow	21.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/pyarrow@21.0.0	Clear No OSV advisories for this exact version
pyparsing	3.2.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/pyparsing@3.2.5	Clear No OSV advisories for this exact version
pyreadline3	3.5.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/pyreadline3@3.5.4	Clear No OSV advisories for this exact version
python-ulid	3.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/python-ulid@3.1.0	Clear No OSV advisories for this exact version
referencing	0.37.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/referencing@0.37.0	Clear No OSV advisories for this exact version
rpds-py	0.30.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/rpds-py@0.30.0	Clear No OSV advisories for this exact version
scipy	1.16.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/scipy@1.16.3	Clear No OSV advisories for this exact version
sqlite-fts4	1.0.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/sqlite-fts4@1.0.3	Clear No OSV advisories for this exact version
sqlite-migrate	0.1b0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/sqlite-migrate@0.1b0	Clear No OSV advisories for this exact version
sqlite-utils	3.39	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/sqlite-utils@3.39	Clear No OSV advisories for this exact version
sqlparse	0.5.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/sqlparse@0.5.4	Clear No OSV advisories for this exact version
telnetlib3	2.0.8	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/telnetlib3@2.0.8	Clear No OSV advisories for this exact version
threadpoolctl	3.6.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/threadpoolctl@3.6.0	Clear No OSV advisories for this exact version
types-pytz	2025.2.0.20251108	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/types-pytz@2025.2.0.20251108	Clear No OSV advisories for this exact version
uvloop	0.22.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/uvloop@0.22.1	Clear No OSV advisories for this exact version
yarl	1.22.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/paperbench/uv.lock	pkg:pypi/yarl@1.22.0	Clear No OSV advisories for this exact version
aiohappyeyeballs	2.4.6	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/aiohappyeyeballs@2.4.6	Clear No OSV advisories for this exact version
anyio	4.8.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/anyio@4.8.0	Clear No OSV advisories for this exact version
async-lru	2.0.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/async-lru@2.0.4	Clear No OSV advisories for this exact version
attrs	25.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/attrs@25.1.0	Clear No OSV advisories for this exact version
automat	24.8.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/automat@24.8.1	Clear No OSV advisories for this exact version
azure-identity	1.19.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/azure-identity@1.19.0	Clear No OSV advisories for this exact version
azure-mgmt-compute	34.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/azure-mgmt-compute@34.0.0	Clear No OSV advisories for this exact version
azure-mgmt-network	28.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/azure-mgmt-network@28.1.0	Clear No OSV advisories for this exact version
cachetools	5.5.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/cachetools@5.5.1	Clear No OSV advisories for this exact version
certifi	2025.1.31	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/certifi@2025.1.31	Clear No OSV advisories for this exact version
charset-normalizer	3.4.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/charset-normalizer@3.4.1	Clear No OSV advisories for this exact version
chz	0.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/chz@0.1.0	Clear No OSV advisories for this exact version
cli-helpers	2.3.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/cli-helpers@2.3.1	Clear No OSV advisories for this exact version
click	8.1.8	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/click@8.1.8	Clear No OSV advisories for this exact version
contourpy	1.3.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/contourpy@1.3.1	Clear No OSV advisories for this exact version
debugpy	1.8.12	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/debugpy@1.8.12	Clear No OSV advisories for this exact version
decorator	5.1.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/decorator@5.1.1	Clear No OSV advisories for this exact version
dill	0.3.9	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/dill@0.3.9	Clear No OSV advisories for this exact version
fastapi	0.115.8	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/fastapi@0.115.8	Clear No OSV advisories for this exact version
frozenlist	1.5.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/frozenlist@1.5.0	Clear No OSV advisories for this exact version
greenlet	3.2.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/greenlet@3.2.3	Clear No OSV advisories for this exact version
httpcore	1.0.7	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/httpcore@1.0.7	Clear No OSV advisories for this exact version
iniconfig	2.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/iniconfig@2.0.0	Clear No OSV advisories for this exact version
ipython	8.32.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/ipython@8.32.0	Clear No OSV advisories for this exact version
ipywidgets	8.1.5	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/ipywidgets@8.1.5	Clear No OSV advisories for this exact version
jiter	0.8.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/jiter@0.8.2	Clear No OSV advisories for this exact version
jsonschema	4.23.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/jsonschema@4.23.0	Clear No OSV advisories for this exact version
jsonschema-specifications	2024.10.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/jsonschema-specifications@2024.10.1	Clear No OSV advisories for this exact version
jupyterlab-widgets	3.0.13	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/jupyterlab-widgets@3.0.13	Clear No OSV advisories for this exact version
litecli	1.14.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/litecli@1.14.4	Clear No OSV advisories for this exact version
loky	3.4.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/loky@3.4.1	Clear No OSV advisories for this exact version
matplotlib	3.10.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/matplotlib@3.10.0	Clear No OSV advisories for this exact version
more-itertools	10.6.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/more-itertools@10.6.0	Clear No OSV advisories for this exact version
msal	1.31.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/msal@1.31.1	Clear No OSV advisories for this exact version
msal-extensions	1.2.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/msal-extensions@1.2.0	Clear No OSV advisories for this exact version
multidict	6.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/multidict@6.1.0	Clear No OSV advisories for this exact version
narwhals	1.26.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/narwhals@1.26.0	Clear No OSV advisories for this exact version
numpy	2.2.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/numpy@2.2.2	Clear No OSV advisories for this exact version
openai	1.61.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/openai@1.61.1	Clear No OSV advisories for this exact version
platformdirs	4.3.6	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/platformdirs@4.3.6	Clear No OSV advisories for this exact version
pluggy	1.5.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pluggy@1.5.0	Clear No OSV advisories for this exact version
portalocker	2.10.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/portalocker@2.10.1	Clear No OSV advisories for this exact version
prompt-toolkit	3.0.50	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/prompt-toolkit@3.0.50	Clear No OSV advisories for this exact version
propcache	0.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/propcache@0.2.1	Clear No OSV advisories for this exact version
psutil	6.1.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/psutil@6.1.1	Clear No OSV advisories for this exact version
ptpython	3.0.29	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/ptpython@3.0.29	Clear No OSV advisories for this exact version
pyarrow	19.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pyarrow@19.0.0	Clear No OSV advisories for this exact version
pycryptodomex	3.21.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pycryptodomex@3.21.0	Clear No OSV advisories for this exact version
pydantic	2.10.6	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pydantic@2.10.6	Clear No OSV advisories for this exact version
pydantic-core	2.27.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pydantic-core@2.27.2	Clear No OSV advisories for this exact version
pyee	13.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pyee@13.0.0	Clear No OSV advisories for this exact version
pyparsing	3.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pyparsing@3.2.1	Clear No OSV advisories for this exact version
pytest-asyncio	0.25.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pytest-asyncio@0.25.3	Clear No OSV advisories for this exact version
pytz	2025.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pytz@2025.1	Clear No OSV advisories for this exact version
pywin32	308	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pywin32@308	Clear No OSV advisories for this exact version
pyzmq	26.2.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/pyzmq@26.2.1	Clear No OSV advisories for this exact version
rich	13.9.4	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/rich@13.9.4	Clear No OSV advisories for this exact version
rpds-py	0.22.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/rpds-py@0.22.3	Clear No OSV advisories for this exact version
structlog	25.1.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/structlog@25.1.0	Clear No OSV advisories for this exact version
tenacity	9.0.0	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/tenacity@9.0.0	Clear No OSV advisories for this exact version
typing-extensions	4.12.2	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/typing-extensions@4.12.2	Clear No OSV advisories for this exact version
tzdata	2025.1	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/tzdata@2025.1	Clear No OSV advisories for this exact version
widgetsnbextension	4.0.13	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/widgetsnbextension@4.0.13	Clear No OSV advisories for this exact version
yarl	1.18.3	PyPI	Transitive	Workspace Subproject dependency evidence; installed when that workspace/package is used.	project/swelancer/uv.lock	pkg:pypi/yarl@1.18.3	Clear No OSV advisories for this exact version