# SBOM for arro3-core 0.9.1 The Python package arro3-core 0.9.1 ships 56 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/arro3-core@0.9.1` - PyPI: https://pypi.org/project/arro3-core/0.9.1/ - Requires Python: \>=3.11 - Homepage: ## SBOMs ### arro3\_core-0.9.1-cp311-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/6f40d740-52b9-522d-9a6e-447767ff03be/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b8e0ada2-3462-59c0-a7df-5d6a9b8907ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/0b557d4c-7778-5c37-ac3c-8219360f714d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/d127a998-3949-525d-a024-22572b08f8b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/cc4603a1-383a-517b-a936-95b608e78a74/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/fc19ad15-ca1b-517e-bd1e-d8ae5a27e323/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-manylinux\_2\_24\_aarch64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/008ac4b8-4efe-5e3c-a54c-eae2a1ea5a91/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-manylinux\_2\_5\_i686.manylinux1\_i686.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b96f77ce-6893-557b-b530-f6e46f612032/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/4c9e101f-2450-5ec0-b420-0ebd486b9a53/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/174de6a1-6a46-5b9d-84f7-f2269d425460/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/ad40bc8f-0995-5a16-b365-38138f15bb44/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/f97673a0-69de-57f2-a6da-4b6eb2bea86c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/2c7b8108-b6b3-53d8-a086-66e3aa552f30/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp311-abi3-win\_arm64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/5531a4c6-06c7-5e2c-9b4f-7d4886cac730/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp313-cp313-pyemscripten\_2025\_0\_wasm32.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/4b557bb8-ee2a-530c-9267-4f057dac2d1b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314-pyemscripten\_2026\_0\_wasm32.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/15ae384c-af1f-5552-b6af-ed6c42eac39c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b2b2bbe6-c03c-5033-b871-54497180fc2f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/201cc502-9d5c-52e8-a888-b6c348fb78ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/1bfe7ddd-58ce-51d6-acb7-44f1acdc1cf4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/06bffd16-e814-5af8-a889-5148a5cfe51a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/a8a8dd0c-ccdb-51d6-a177-5072923edbb2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/ccc37141-92de-52ed-a935-720c17f35a9d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-manylinux\_2\_24\_aarch64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/a0ce5711-5171-53dc-8cb8-febf6fa549df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-manylinux\_2\_5\_i686.manylinux1\_i686.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/55b97517-90ee-5417-958c-7ded2fd386f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/ab2a3e06-bea1-5c7c-a0ac-e24c42a58211/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/24fdc76c-bc64-5a38-b446-162450f1c82d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/bcfe4eb2-03c8-5241-b272-557ba1005cbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/90ebeb03-03a2-5188-b689-ee02dc97da53/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-win\_amd64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/4549a6fe-3d07-51f0-9ad5-be294e748caf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp314-cp314t-win\_arm64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/a4110832-ac05-552f-aa20-d31661fae9ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b1d9b87f-853b-555d-91e3-664e1e326c11/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/59b91e2b-cc94-58e3-b04b-0403b259eb27/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/bd4810f5-65b0-5de6-85a1-e80a31ae86db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/08233328-8200-588f-9c32-ce42fbe5ce0c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/cbd4aad6-954e-5e0f-a053-f7e756f8040c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/6a16b303-2202-5afa-909c-cb7583692956/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-manylinux\_2\_24\_aarch64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/c9b5a633-9e06-5d0a-ac01-531bfb92c342/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-manylinux\_2\_5\_i686.manylinux1\_i686.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/e0801b40-828c-5c37-a473-abffd148fbcd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/627f5993-2f7f-5f96-9e63-1475b53bd338/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b938ed07-e627-5aae-ac42-5459c0c4ed0e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/f9f9ed08-9b7f-5eee-822a-939feef55368/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/bb359372-c4e2-57ed-afc5-295a445bea15/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-win\_amd64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/968bfeb3-cfc5-576d-b855-97b22195ded8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-cp315-cp315t-win\_arm64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/00f2830c-873f-5262-982e-a9013d4075d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/dae2f380-0b2e-5336-91ef-4d1ea6af4d14/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b6e19bdb-d011-56a5-b82b-7b5920cd5f48/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/4b70694b-5321-5c89-8a0e-b9e7d684afa2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/835ecf61-9645-558a-a9b4-a700e8e14d8c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-manylinux\_2\_24\_aarch64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/a6d81d12-f821-55ad-a92d-d11bff21b571/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-manylinux\_2\_5\_i686.manylinux1\_i686.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/daa6f48f-3f4a-59bf-bcef-3ca811e98b91/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/5aa34654-dd83-5cad-aec3-e68b61822a60/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/47f50895-72d8-5d10-9c8f-b0fe7382728c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/a29fa8fc-895e-5fd2-8d27-5caaf4cf7e50/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp73-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/e3ef2876-aec6-5fed-86a7-2c2b08daa927/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp80-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/2ba41828-1f30-5b8c-974d-a1d6c69bc1e7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### arro3\_core-0.9.1-pp311-pypy311\_pp80-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, kylebarron/arro3, workflow wheels.yml). - [arro3\_core-0.9.1.dist-info/sboms/arro3-core.cyclonedx.json](https://pypi.sbomify.com/artifact/4871dd21-3abb-5f75-a63f-a206a4a5c23a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-111959](https://insights.sbomify.com/CVE-2026-111959/) | unknown | arrow-data 59.0.0 (crates.io) | 59.3.2 | Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/arro3-core@0.9.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/arro3-core/0.9.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/arro3-core/0.9.1