# SBOM for daffi 3.0.1

> Lightweight inter-process RPC framework with a high-performance native core

The Python package daffi 3.0.1 ships 20 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/daffi@3.0.1`
- PyPI: https://pypi.org/project/daffi/3.0.1/
- Requires Python: \>=3.10
- Bug Tracker: <https://github.com/600apples/daffi/issues>
- Homepage: <https://github.com/600apples/daffi>
- Source: <https://github.com/600apples/daffi>

## SBOMs

### daffi-3.0.1-cp310-cp310-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d99bbf5b-8ea0-593f-ac26-57fc6be3cf77/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/57d8f0a9-0dfd-5c3f-88a8-03a2e59b10a2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/198c47e3-982f-56c6-9436-b52d73d26c91/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/04148397-92c0-5047-93f4-09326d989ab6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp311-cp311-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/13580df9-59dd-5192-b280-c0f03e14e8eb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/37fe73e7-fbd0-5a0d-ad12-34259075c702/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fcdb84dc-998f-58cb-9ea0-21f02223fc41/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/780009f4-f52c-5f20-ad2f-2365aa2de206/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp312-cp312-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/61f7a865-c955-5899-a450-8bd5df740f1a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7431af94-f81f-535c-9cbc-d9ce257e77ae/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8598ac04-febb-5ac0-a8bb-f40fccd22867/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0211d9f7-a368-5c5c-ba51-748c2b856b17/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp313-cp313-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bea38c07-f893-5460-a141-9e965665900d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5f69c928-8d92-5296-9398-48cc46807eeb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a4008277-d03e-55cc-8d76-f7f2589808fb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/20073c55-9352-529f-b4ff-85ba1643ad2c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp314-cp314-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3f61167b-c73b-5bf2-a4fc-2849b6d320d0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/08999106-789d-5ed4-bcab-339ca213a354/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3366160a-01c0-518a-8006-b19c6e78911e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### daffi-3.0.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, 600apples/daffi, workflow wheels.yml).

- [daffi-3.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/af971ef6-bdd6-5451-96dc-4058ff9f4131/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/daffi@3.0.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/daffi/3.0.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/daffi/3.0.1