# SBOM for alasco-money 0.2.2 The Python package alasco-money 0.2.2 ships 24 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/alasco-money@0.2.2` - PyPI: https://pypi.org/project/alasco-money/0.2.2/ - Requires Python: \>=3.10 ## SBOMs ### alasco\_money-0.2.2-cp310-cp310-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/87f2e81c-fdea-5ed7-87a2-947d23f1d63f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp310-cp310-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/48315878-4b51-50c7-a3b5-1bcd1b7825bf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/abd713fd-e967-583e-ac65-d05199bca697/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/f7542a22-28e9-5333-8a5c-8958f9e31159/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp311-cp311-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/9c654a60-b1ab-582d-98e9-c9712eee6dc2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/1dfd09b7-68ef-518c-a949-ba8b9a83229e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/72cf11e8-2255-5bfd-8312-9aa671fafa2e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/80c6fa07-e880-5daf-a0a6-fcf0be7ed468/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/adf3f4c2-ab92-5744-8ba2-6ce51a07715f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/774b5840-ce41-580d-a4fe-78f7963ea9c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/c0c4f46b-d09a-59b0-ae0a-bbd5c64a76cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/de02c7ee-606c-581d-991d-65e81cd7c3fc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/3b82b2d6-bbcc-5491-b454-91ec1856160f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/bf7bba50-3565-5eae-b769-03a4286351d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/85c4a3db-9285-5c3c-b78b-7cdfcceff5df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/65c86553-f1b8-5356-9ac8-dffcc2e331b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp314-cp314-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/f8688519-1dd9-59c2-ab20-b28f414c19d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/72d07222-30bc-5652-b73d-8dd11c9944c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/730bc14c-a32a-5d82-90e8-de798f5c8fd6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/a65a90ab-4fbf-5373-a2f9-8c86d6a677a7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp315-cp315-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/48d0ab13-716b-528d-9aee-d3a7cd0f840f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp315-cp315-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/c1723b6c-f867-55c6-8fde-d4bfb7c720a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp315-cp315-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/d8381caf-62c9-5b08-a324-4184c7b3612b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### alasco\_money-0.2.2-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, alasco-tech/alasco-money, workflow release.yml). - [alasco\_money-0.2.2.dist-info/sboms/alasco-money.cyclonedx.json](https://pypi.sbomify.com/artifact/d30fe8b3-95a9-5dcd-a2fd-2c027b74aca5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2024-0370](https://osv.dev/vulnerability/RUSTSEC-2024-0370) | unknown | proc-macro-error 1.0.4 (crates.io) | none listed | proc-macro-error is unmaintained | | [RUSTSEC-2026-0001](https://osv.dev/vulnerability/RUSTSEC-2026-0001) | unknown | rkyv 0.7.44 (crates.io) | 0.7.46 | Potential Undefined Behaviors in \`Arc\\`/\`Rc\\` impls of \`from\_value\` on OOM | | [RUSTSEC-2026-0235](https://osv.dev/vulnerability/RUSTSEC-2026-0235) | unknown | rkyv 0.7.44 (crates.io) | 0.8.17 | Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/alasco-money@0.2.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/alasco-money/0.2.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/alasco-money/0.2.2