# SBOM for bosing 2.8.0 > Waveform generator for pulse sequences in quantum computing The Python package bosing 2.8.0 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/bosing@2.8.0` - PyPI: https://pypi.org/project/bosing/2.8.0/ - License: MIT - Requires Python: \>=3.10 - Documentation: - Issues: - Source: ## SBOMs ### bosing-2.8.0-cp310-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b3fcc951-fab7-5ba5-9a0e-9df0ae8d9e51/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp310-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/499a614d-1ec3-5c38-9d04-22207c818092/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp310-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/26b43eb4-83bc-5377-bc05-0bb26f1b0d53/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp310-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/07e669b0-6523-5def-b0d0-b6748a3df7aa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp310-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/182fb912-f560-5e2f-8ec9-556bb636668c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp310-abi3-win\_arm64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/95f4d6bd-e850-5e9c-b3fb-8715f911c0ea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp314-cp314t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/fda9f0e7-9e57-5faf-bb9a-3700e649dfbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/75a9d57b-2851-5936-aadd-95e751470dec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/2da55314-fca7-5625-b69c-f878016da894/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/363a26a9-e1cb-5217-bbdb-8b0e06975164/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp314-cp314t-win\_amd64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/69813df2-6d65-5944-9ae2-8f538aac17f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### bosing-2.8.0-cp314-cp314t-win\_arm64.whl PEP 740 attestation verified (GitHub, kahojyun/Bosing, workflow ci.yml). - [bosing-2.8.0.dist-info/sboms/bosing-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0afa9ac1-67e5-5ccd-8f36-eb9795e9a534/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/bosing@2.8.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/bosing/2.8.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/bosing/2.8.0