marshmallow
No advisory in the database names marshmallow. No LLM component dependency is recorded for marshmallow (PyPI).
A lightweight library for converting complex datatypes to and from native Python datatypes.
Advisories
Advisories that name marshmallow as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
No advisory in the database names this package.
Dependencies of the latest release
As declared in PyPI metadata for version 4.3.1. Optional extras are listed with their extra name.
- backports-datetime-fromisoformat
- typing-extensions
Tracked packages that depend on it
Among the packages in the registry; not every dependent on PyPI.