View packages at a commit

Paste a `locked_commit` from your `minimal.toml`, or a recent commit from the list.

Back to search results
pyproject-metadata owner avatar

pyproject-metadata

Version: 0.12.1

pyproject.toml `[project]` metadata parsing

Install package

min add pyproject-metadata
Datahacktoberfest

OpenSSF Score

OpenSSF Scorecard — pyproject-metadata

Scored 0–10, as OpenSSF Scorecard reports them.N/A: not applicable or inconclusive.

Binary-Artifacts

No binaries found in the repo

10
Branch-Protection

Could not be evaluated.

N/A
CI-Tests

30 out of 30 merged PRs checked by a CI test -- score normalized to 10

10
CII-Best-Practices

No effort to earn an OpenSSF best practices badge detected

0
Code-Review

Found 0/23 approved changesets -- score normalized to 0

0
Contributors

Project has 22 contributing companies or organizations

10
Dangerous-Workflow

No dangerous workflow patterns detected

10
Dependency-Update-Tool

Update tool detected

10
Fuzzing

Project is not fuzzed

0
License

License file detected

10
Maintained

5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5

5
Packaging

Packaging workflow detected

10
Pinned-Dependencies

All dependencies are pinned

10
SAST

SAST tool is not run on all commits -- score normalized to 0

0
Security-Policy

Security policy file not detected

0
Signed-Releases

No releases found

N/A
Token-Permissions

GitHub workflow tokens follow principle of least privilege

10
Vulnerabilities

0 existing vulnerabilities detected

10

Scored by Minimal's own OpenSSF Scorecard run.

pypa/pyproject-metadatascanned

Last scored on

What is "pyproject-metadata"?

pyproject.toml `[project]` metadata parsing

How to use this package

Quick install

Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.

min add pyproject-metadata

Declare as a task dependency in minimal.toml

Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.

[tasks.dev]
packages = ["pyproject-metadata"]

Build-time vs runtime

Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.

min add --build pyproject-metadata
min add --runtime pyproject-metadata
Compare versions
to

Dependencies (4)

Dependencies
NameVersionKind
base—build
flit-core4.0.2runtime
py-packaging26.3runtime
pythonCVE:23.14.8runtime

Dependants (1)

Dependants
NameVersion
meson-python0.20.0
  1. pyproject-metadata v0.12.11117d4f
    Diff
    Lines:+2 / -2Deps:4
    Released:
  2. pyproject-metadata v0.11.08b6d6d2
    Diff
    Lines:+2 / -2Deps:4
    Released:
  3. pyproject-metadata v0.9.11975757
    Diff
    Lines:+58 / -8Deps:4(+4)
    Released:

No direct advisories

This package inherits 3 transitive advisories from its dependencies.

Build provenance

Loading provenance

For the signed record of what the build used, see the Provenance tab.

Software Bill of Materials — every package this build depends on
PackagesVersion
pyproject-metadataROOT0.12.1
acl2.4.0
attr2.6.0
bash5.3
bash-bootstrap5.3
binutils2.47
bison3.8.2
bzip21.0.8
coreutils9.12
diffutils3.12
expat2.9.0
file5.48
findutils4.11.0
flex2.6.4
flit-core4.0.2
gawk5.4.1
gawk-bootstrap5.4.1
gcc15.2.0
gdbm1.26
glibc2.44
gmp6.3.0
grep3.12
gzip1.15
libcap2.78
libffi3.8.0
linux_headers6.12.43
lz41.10.0
m41.4.21
make4.4.1
mpc1.4.1
mpfr4.2.2
ncurses6.6
openssl3.6.5
patch2.8
pcre210.49
perl5.44.0
pkgconf3.0.5
py-packaging26.3
pyproject-hooks1.2.0
python3.14.8
readline8.3
sed4.10
sqlite3.54.0
tar1.35
tzdata2026e
util-linux2.42.4
xz5.8.4
zlib1.3.2
zstd1.5.7

Join the waitlist

Confirm your identity by email or GitHub.

or