# SBOM for csan 0.9.0 > Cutter call numbers for library cataloging (Cutter-Sanborn and Library of Congress) The Python package csan 0.9.0 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/csan@0.9.0` - PyPI: https://pypi.org/project/csan/0.9.0/ - License: MIT OR Apache-2.0 - Requires Python: \>=3.9 - Changelog: - Issues: - Repository: ## SBOMs ### csan-0.9.0-cp39-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, veralvx/csan, workflow publish-pypi.yml). - [csan-0.9.0.dist-info/sboms/csan-py.cyclonedx.json](https://pypi.sbomify.com/artifact/c06e9a96-3cd9-584d-b73f-3b44ad9d82c0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### csan-0.9.0-cp39-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, veralvx/csan, workflow publish-pypi.yml). - [csan-0.9.0.dist-info/sboms/csan-py.cyclonedx.json](https://pypi.sbomify.com/artifact/d95cb5d8-ffa7-5bfa-9e30-d8f9aeb80498/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### csan-0.9.0-cp39-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, veralvx/csan, workflow publish-pypi.yml). - [csan-0.9.0.dist-info/sboms/csan-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a4edc233-1d84-5b36-a41a-d6077ad4d86f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### csan-0.9.0-cp39-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, veralvx/csan, workflow publish-pypi.yml). - [csan-0.9.0.dist-info/sboms/csan-py.cyclonedx.json](https://pypi.sbomify.com/artifact/5d53169b-2388-580a-856d-5f079544135f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### csan-0.9.0-cp39-abi3-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, veralvx/csan, workflow publish-pypi.yml). - [csan-0.9.0.dist-info/sboms/csan-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e328075f-9698-5593-943e-3f24c41b6827/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### csan-0.9.0-cp39-abi3-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, veralvx/csan, workflow publish-pypi.yml). - [csan-0.9.0.dist-info/sboms/csan-py.cyclonedx.json](https://pypi.sbomify.com/artifact/14432e73-3140-58bc-b581-ca8a0bb06024/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### csan-0.9.0-cp39-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, veralvx/csan, workflow publish-pypi.yml). - [csan-0.9.0.dist-info/sboms/csan-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6580bba9-3acc-56f2-9f36-824fbcc5a770/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### csan-0.9.0-cp39-abi3-win\_arm64.whl PEP 740 attestation verified (GitHub, veralvx/csan, workflow publish-pypi.yml). - [csan-0.9.0.dist-info/sboms/csan-py.cyclonedx.json](https://pypi.sbomify.com/artifact/d0efa32a-1478-5b58-b934-5a2ac9f008f4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/csan@0.9.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/csan/0.9.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/csan/0.9.0