# SBOM for cgt-py 0.11.0 The Python package cgt-py 0.11.0 ships 21 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/cgt-py@0.11.0` - PyPI: https://pypi.org/project/cgt-py/0.11.0/ - Requires Python: \>=3.10 - Homepage: ## SBOMs ### cgt\_py-0.11.0-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/0d4436a9-af61-5cf2-8421-a930dfbc52aa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/b9872419-ebac-5b80-b446-673458dd85b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/6e21f977-4429-598d-84d3-44aaa3074f68/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/cbd38be3-08a0-52b8-a5d3-df4280a539bc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/3e6c07a5-fa54-507e-a42c-e268df075178/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/77a2df1f-a982-5d31-b1b9-ccf5817a0d19/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/26586c74-a58a-50f0-92a2-970d86b22c54/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/3b88e2ec-0abe-5a46-b3c1-b72b2ca48df2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/543b3c31-c85b-5c1b-bc91-19ee4143381a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/5f74bd3b-6a28-5fac-a4cd-ed0851ccdaf9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/42cc14dd-494e-5776-9920-0a6d4f2631e3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/736e9a5a-3342-5166-83fa-b504a2c3f9fd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c896f1df-65a9-5d2e-bbcf-6c2453fbcf72/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/38b5dbe1-ac0c-5cf4-a5e3-8a4b90b0438a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c50143f9-efc5-546f-8620-c3cad6522ab8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/4e07ed7b-bd60-5881-8228-090665124c33/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/5166783c-4b04-559d-a0cb-858f3c06ff17/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/a89f5d6d-4591-5520-b762-f372d959b825/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/25d3ac3b-b8ad-59d4-8190-e1fcad647302/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/4946955d-c218-5a6e-9a95-220536a274f1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ### cgt\_py-0.11.0-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, t4ccer/cgt-tools, workflow ci.yml). - [cgt\_py-0.11.0.dist-info/sboms/cgt\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/0ef0030c-fc11-595f-a091-c6a3b5f188e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2025-0081](https://osv.dev/vulnerability/RUSTSEC-2025-0081) | unknown | unic-char-property 0.9.0 (crates.io) | none listed | \`unic-char-property\` is unmaintained | | [RUSTSEC-2025-0075](https://osv.dev/vulnerability/RUSTSEC-2025-0075) | unknown | unic-char-range 0.9.0 (crates.io) | none listed | \`unic-char-range\` is unmaintained | | [RUSTSEC-2025-0080](https://osv.dev/vulnerability/RUSTSEC-2025-0080) | unknown | unic-common 0.9.0 (crates.io) | none listed | \`unic-common\` is unmaintained | | [RUSTSEC-2025-0090](https://osv.dev/vulnerability/RUSTSEC-2025-0090) | unknown | unic-emoji-char 0.9.0 (crates.io) | none listed | \`unic-emoji-char\` is unmaintained | | [RUSTSEC-2025-0100](https://osv.dev/vulnerability/RUSTSEC-2025-0100) | unknown | unic-ucd-ident 0.9.0 (crates.io) | none listed | \`unic-ucd-ident\` is unmaintained | | [RUSTSEC-2025-0098](https://osv.dev/vulnerability/RUSTSEC-2025-0098) | unknown | unic-ucd-version 0.9.0 (crates.io) | none listed | \`unic-ucd-version\` is unmaintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/cgt-py@0.11.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/cgt-py/0.11.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/cgt-py/0.11.0