# SBOM for blake3 1.0.11

> Python bindings for the Rust blake3 crate

The Python package blake3 1.0.11 ships 98 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/blake3@1.0.11`
- PyPI: https://pypi.org/project/blake3/1.0.11/
- Author: Jack O'Connor \<oconnor663@gmail.com\>
- License: CC0-1.0 OR Apache-2.0
- Requires Python: \>=3.11
- Homepage: <https://github.com/oconnor663/blake3-py>
- Source Code: <https://github.com/oconnor663/blake3-py>

## SBOMs

### blake3-1.0.11-cp311-cp311-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/d5e56e6a-116c-57f0-a0a9-a620e3597472/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/45eff824-cd1d-54c4-b284-a18cd16b7a7c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/3a5c4411-5cb0-5343-9112-45bae31b3b52/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/a62d1f5f-6cc1-5d96-8247-e93273e3f21d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4da780b6-8b7f-50cd-84e2-906103a0bc37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/cffc8612-646d-5f62-9318-2711fd917d16/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/f9d42d97-00b3-51d1-b56e-9086d2547783/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/f68bd07f-0743-5fa9-92d1-714190c9c814/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-manylinux\_2\_31\_riscv64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/288d34cd-b02e-5741-8fc6-964d558b17b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-musllinux\_1\_1\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/a80d092f-6b35-5ebf-b89f-3e1c011d66cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-musllinux\_1\_1\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/19030118-f55c-5953-a45f-cbac118c1492/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-win32.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/d8266874-87a1-5296-ad92-73cc5785e6bb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-win\_amd64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/68cc2641-c31d-5d0b-8691-e2eec1f21e6a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp311-cp311-win\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/dc0e07f7-6d0c-58f4-abcb-73b366a4f460/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/f037edc9-e3ec-52b6-97f7-826148b90af7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4a411a67-2033-52ea-ad56-aa3360ecbe20/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/6d7984a1-259e-5c42-ae31-cfcee15b32f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/a15212db-e0d9-5772-838f-707ac058eaaf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/36502308-e77e-5446-b6e2-5ef2c5ae04fe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/7ae401bd-36c8-5093-9bdb-4c55469c8250/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/a88cb1a1-50dd-508d-8000-b0c75d623dc6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/1e7c7c24-51c6-5816-94f7-0875c92bad2c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-manylinux\_2\_31\_riscv64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/f5dc22ae-6be0-5dd2-a3f9-62167941dc34/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-musllinux\_1\_1\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/aeeea136-f40e-519d-853c-0f7e52f6be5e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-musllinux\_1\_1\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/72779101-18f4-5cc6-a4bb-9a9b6eeef23f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-win32.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/09087b37-f3a1-52d6-846e-014c564d1e62/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-win\_amd64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/dfa38673-6dbe-56f1-8742-842fe9aad988/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp312-cp312-win\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/c7fc80f1-8e84-5530-b109-4c583870c610/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/92b833e3-eca8-5b74-b4d9-514b5323419e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/f542d0f6-f8f1-5013-b160-8cc11babe27b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/10d03b25-b117-59f5-a551-857535892acd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/002e6a6a-0fe2-5c2f-b9b9-16a1840c9277/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/8659a0a0-150c-5e72-be9f-c7261f9b563a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/f4b95886-deeb-5176-9515-b444bbe9be92/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/1e8fac1d-eae6-56b1-9edb-cb1a73ae2de8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/33825560-fc38-555e-b8e7-acab690ca395/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-manylinux\_2\_31\_riscv64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/419a2103-83cb-55ff-a61a-0526b96df78d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-musllinux\_1\_1\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/dee1eacc-f02d-5988-acc8-f71f9f053834/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-musllinux\_1\_1\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4a93c0e2-b88a-59cf-be22-0218a2934028/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-win32.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4c28b027-a124-5109-b0f1-0a0404691b26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-win\_amd64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/fba05605-6013-523a-9131-ec9cabe88518/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp313-cp313-win\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4e6a8d31-8c2f-5945-a16e-7ae6ae866303/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/28814bd9-2726-5013-85cd-6c529824e312/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/de19e4c3-892e-576e-845f-1e2d15b848bf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4a9306ee-9be1-51e4-880d-473a30aa21d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/bb43b6b7-dea8-56db-b94f-921f69931bd9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/bff5902d-494e-53ed-8983-738dfdb902fe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/ea2eb229-1311-5b92-a1a2-7c4979dacf40/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/05332701-1c93-516f-9cc9-d9fbdbe91cb3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/d351c04f-82e0-560f-90a5-04f85e35bd94/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-manylinux\_2\_31\_riscv64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/9104d30d-b23c-5713-8e0f-561252b7578d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-musllinux\_1\_1\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/26986bfc-0c0f-5483-abb9-dcc3acfb0174/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-musllinux\_1\_1\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/e002b0d2-0b9e-5046-881b-e023e79e8d91/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-win32.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/345a6034-daa1-5679-84b9-3864f46589bb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-win\_amd64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/0f240efe-e24b-5206-af75-f6b8c54110e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314-win\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/c5221599-492d-5399-8d5f-9ffbbf0d3b0c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/e1650f82-7016-5664-827d-61f49b86abd7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/0075ce27-dc3a-5d43-8478-26f6b9a8d7db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/306db29a-d354-565c-b70b-990ed69d44b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/58cb10f9-e276-5ce4-be04-76db3dbe8950/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/1c5bd993-b884-5bc8-a5a5-b216e845254d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/cd150201-1d91-52ca-be67-7fc67c3aa5d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/7f3e05aa-bdf1-5b1a-a1a8-91c20e2adc04/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4e71ea6f-17f6-5eb2-9d1f-5ee6ec564785/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-manylinux\_2\_31\_riscv64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/3486aee7-0434-5c8d-a83a-bbeb83c93b8a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-musllinux\_1\_1\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/76101c7c-891a-57e2-908a-3a97de960337/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-musllinux\_1\_1\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/0e6fdbcf-39e8-5c37-9db6-8e18f6b82e50/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-win32.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/8b4a363b-6d8b-5749-a28f-18b8083c3c55/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-win\_amd64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/cbf3ce74-62fa-5a47-90df-29a039b733df/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp314-cp314t-win\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/7b044985-ed89-55da-b0d9-3c6a3435b1a3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/18c06415-1260-5c2e-b0cd-d4186b0f14dd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/83205bb9-d0a1-5292-b247-71d307a126fe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4763b92c-eb20-5436-9413-020325b8c74f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/1f950261-e047-51d6-acee-0946d89dd958/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/d832c130-1fc8-5c2d-ba21-17ec567bb37b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/beb5be6c-cd01-5aee-b434-8bd7664d883d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/35b1a528-0924-5bdb-9062-113749d73aa6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/c601bc68-7dda-52fc-8b01-f2304495a438/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-manylinux\_2\_31\_riscv64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/6f4629bf-6701-5b4e-868f-7d6b30a443c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-musllinux\_1\_1\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/31059c0c-50b0-52b4-9031-ebef08057d34/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-musllinux\_1\_1\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/97b3504c-9309-5365-b528-c4c4237856f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-win32.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/db4f344a-ee52-50b8-b9ea-90d794d0a656/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-win\_amd64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/29e22c62-0945-5699-b7c6-143370fdb65c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315-win\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/83c4df83-f046-51b0-8c57-9697975247d9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/f165fe35-ec79-5607-a087-ca07ef9f3528/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/7984e65b-49a6-56eb-9b72-977ee66de732/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/801b0222-4d07-5367-b09a-4230d3e2561f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/bf0c0620-ab8c-51b5-8bc4-22295b325936/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-manylinux\_2\_17\_i686.manylinux2014\_i686.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/30e46d6d-e127-5462-9c76-e998d3d715e3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/08c3446c-cac2-5bb7-80b8-92828552f173/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4172d624-4cb7-5528-a505-3c509bd66c47/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/4c485b1b-f273-53b3-b74f-2a6de2f7d9b9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-manylinux\_2\_31\_riscv64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/ed33afcb-b0b3-5589-8796-193aeb2e5556/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-musllinux\_1\_1\_aarch64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/c35682a0-44f0-5d2f-ae95-bbc5361d756f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-musllinux\_1\_1\_x86\_64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/88650811-3111-5e07-8fe8-bfec38e67e00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-win32.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/e4e16f53-43ac-5f4e-830d-7ddd5ccaaf22/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-win\_amd64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/985e34ef-6038-56c6-b9ea-e0ff79704ca9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### blake3-1.0.11-cp315-cp315t-win\_arm64.whl

PEP 740 attestation verified (GitHub, oconnor663/blake3-py, workflow dists.yml).

- [blake3-1.0.11.dist-info/sboms/blake3.cyclonedx.json](https://pypi.sbomify.com/artifact/f387fd4e-1611-58c2-b945-904fbcec8a63/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/blake3@1.0.11
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/blake3/1.0.11.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/blake3/1.0.11