# SBOM for bunker-stats-rs 0.3.1

> Ultra-fast Rust-powered statistics and time-series utilities for Python.

The Python package bunker-stats-rs 0.3.1 ships 34 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/bunker-stats-rs@0.3.1`
- PyPI: https://pypi.org/project/bunker-stats-rs/0.3.1/
- Requires Python: \>=3.8
- documentation: <https://github.com/AdamEzzat1/bunker-stats>
- homepage: <https://github.com/AdamEzzat1/bunker-stats>
- issues: <https://github.com/AdamEzzat1/bunker-stats/issues>
- repository: <https://github.com/AdamEzzat1/bunker-stats>

## SBOMs

### bunker\_stats\_rs-0.3.1-cp310-cp310-macosx\_10\_12\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e941d68a-b830-57c1-b046-d448543159ba/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp310-cp310-macosx\_11\_0\_arm64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a36cb6fa-4abd-5646-91ba-c57562203a1c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b13668b0-1844-54b3-a5b8-685183715b56/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/310f2e46-be94-592a-8772-1c0668c0516f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp310-cp310-musllinux\_1\_2\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f654adc3-ddfa-5326-ae98-7fd2b140c6b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/74708ba8-5a6f-58cc-be90-aa11d6cbda6d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp310-cp310-win\_amd64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7da66fbb-7ac9-54e4-ba0e-463ae3aeeeca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp311-cp311-macosx\_10\_12\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e66552a6-1217-5798-819f-c0f044324647/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp311-cp311-macosx\_11\_0\_arm64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/52c2f95d-64c5-530e-a50e-a9716631a6eb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/0d38a112-ee51-5407-8504-5b95eeb2ba34/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/8b7fa35c-a5f1-59d4-8a22-86a6f4a5862f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c1636b48-5267-55c5-a5e7-2eca8b518f10/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ab6a3f35-3818-5c0f-8ccb-00bd4d65b159/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp311-cp311-win\_amd64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/76bbb44e-c980-5ae3-a72a-cb1abb5b2648/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp312-cp312-macosx\_10\_12\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/17f1c397-df49-5f39-a32d-22e7646e6461/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp312-cp312-macosx\_11\_0\_arm64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7861d8a0-55e4-5c8e-b035-8266681a29c4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/0d285aad-e3b4-5519-ac33-f501c38cf667/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7089fe32-f4e4-5c6d-9817-70b27881e513/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c36ef058-abaa-525b-a31b-04e2ce1a368b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f260b043-f9c3-561b-b50b-ed47393b61a3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp312-cp312-win\_amd64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c29d045b-3133-5af3-9651-3389533497c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp313-cp313-macosx\_10\_12\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/580d2366-bb89-559a-947d-aae361c91670/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp313-cp313-macosx\_11\_0\_arm64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/bee897ab-9e54-59ef-9ca4-227bad0bd4ec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e31e6cb9-7f7d-568c-a207-ed4a284fc3aa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/fe10c60f-7219-5548-9af1-bd0e5312c244/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7248bded-9f00-5f71-ba0a-503603c39caa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/03eecf63-2ef0-521d-8aa9-bb5b5806924d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp313-cp313-win\_amd64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/acadb6a5-63ad-50b6-8b0a-0eaa15bb5023/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp39-cp39-macosx\_10\_12\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b40034a4-6fd6-5e49-9ea9-e06a6905d714/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/6e7642ac-6e9a-54ed-b643-b704bebbc20f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b3d548d4-3b71-549f-9cc3-a25a3e6bd299/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp39-cp39-musllinux\_1\_2\_aarch64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/1ce467d9-440b-5aba-a0c5-f476e90825c2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp39-cp39-musllinux\_1\_2\_x86\_64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5f76f781-b60b-5d7d-ba3b-08469258bd63/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### bunker\_stats\_rs-0.3.1-cp39-cp39-win\_amd64.whl

- [bunker\_stats\_rs-0.3.1.dist-info/sboms/bunker-stats-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e8e7e6a8-49dc-567e-bb88-ec36681e0e6f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.22.6 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.22.6 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.22.6 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` |
| [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |
| [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.8.5 (crates.io) | 0.8.6 | Rand is unsound with a custom logger using \`rand::rng()\` |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/bunker-stats-rs@0.3.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/bunker-stats-rs/0.3.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/bunker-stats-rs/0.3.1