SBOM for assembly-theory 0.7.0

Open, reproducible calculation of assembly indices

CycloneDX 3 known vulnerabilities

License: MIT OR Apache-2.0
Requires Python: >=3.10
PyPI: assembly-theory 0.7.0
Documentation: https://docs.rs/assembly-theory/latest/assembly_theory/python
Repository: https://github.com/DaymudeLab/assembly-theory

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

assembly-theory.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 3 known vulnerabilities

assembly-theory.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 3 known vulnerabilities

assembly-theory.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 3 known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0190 Unsoundness in `Error::downcast_mut()`	Unknown	anyhow 1.0.102 crates.io	1.0.103
RUSTSEC-2026-0204 Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid	Unknown	crossbeam-epoch 0.9.18 crates.io	0.9.20
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.52.3 crates.io	1.53.3

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]