PyPI / One release: metadata, files and known vulnerabilities

One release of a Python project: metadata as of that version (requires_dist, requires_python, licence, classifiers, project URLs), its wheel and sdist files with hashes, sizes and upload times, and the known vulnerabilities PyPI lists (OSV ids, aliases, fixed_in). An unknown project or version is a miss ($0). Free, no key: the PyPI JSON API run by the Python Software Foundation. PyPI's Acceptable Use Policy bans using the author emails in this data for spam or selling them.