# SBOM for daisy 2.0.1 > Blockwise task scheduler for processing large volumetric data The Python package daisy 2.0.1 ships 39 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/daisy@2.0.1` - PyPI: https://pypi.org/project/daisy/2.0.1/ - Requires Python: \>=3.11 - Changelog: - Homepage: - Issues: - Repository: ## SBOMs ### daisy-2.0.1-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/98d70522-b20a-53b3-9b16-5aee13eda92b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp311-cp311-macosx\_11\_0\_arm64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b7c46ac7-7402-5d28-b497-4b4b777b990b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/472219e4-9932-5087-9ece-60b49922d025/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e0590c31-522f-5e4b-ad9c-c13b9f6ded74/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4e27eddd-67c4-5da7-b5bc-76e720873ec5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/f44a6e80-bbb4-5d99-b05c-af63c4065e71/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp311-cp311-win\_amd64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/61e2b931-7777-5e4b-9add-5d9914f9202e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/477705fe-7545-5fd2-909d-9597988f0a38/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp312-cp312-macosx\_11\_0\_arm64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6db3c6a6-9bb1-5fba-9dbb-ff7463ece4fa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a7e6df53-9309-5d1d-bb18-09ad2548965b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/62e243bf-59b1-5d48-94aa-94d8f32f6728/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/bc849f91-55c8-568d-a66e-0cc37b99ec8b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ba489d15-4a01-5692-a01f-d57e35241f36/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp312-cp312-win\_amd64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/18176f43-2600-5438-9cec-7a10a1ba39d8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/10c3baa4-c99b-5ca9-a007-d6136bd692ff/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp313-cp313-macosx\_11\_0\_arm64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a8813c24-53c6-5feb-91cd-f4317560e8b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/25e8a8cf-254b-55c9-b99a-6fb7df0e494e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4de8e786-6bcc-5534-af64-95ad1eac53e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/67e02f63-ad48-583a-bda2-d5e5dbd0026c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/82c2f63e-34c6-551e-9144-e2b4796f6c3e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp313-cp313-win\_amd64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0c613cf4-9bd2-55da-9528-18bb8d962786/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8c964d02-5905-5e4f-9a89-d0a87ff11893/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314-macosx\_11\_0\_arm64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4984d7db-78bb-5135-bf9a-c083a519cc8c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/78c781b9-3a18-57f8-8135-57ad8ce33840/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e57fa9de-9568-5d44-9855-332aa0e93ab1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/296543ea-2052-53e8-9c05-dbec91db4cd7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/31ecc79e-b491-5549-abfc-433ee40856d0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314-win\_amd64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/44c3e3d4-e751-50b6-84a4-4d3ec4c5cd60/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/35bbd1eb-d907-5e0f-981c-6645593071f7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e06e174a-4c83-583c-a0bd-73874ece2196/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/9251096c-fbd4-5c2b-8778-2dcd418329b2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4c65484e-136a-5baf-af88-fd4e1fe9edf3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/fe802bd0-67b5-51f9-ba41-45eb6f3c5336/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp315-cp315-win\_amd64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/08ec6b18-c2cd-5f4e-bae9-ef22f0b0f035/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/d33d47eb-f715-5197-a7b4-a932079a9308/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/bc449928-fd2c-54c6-9a1e-53417dea37ab/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e55f93d4-9a89-5b57-9f92-9847fc9269bf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-pp311-pypy311\_pp73-musllinux\_1\_2\_aarch64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3b849d6a-9e38-57ca-836c-d8dd1c9f2223/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ### daisy-2.0.1-pp311-pypy311\_pp73-musllinux\_1\_2\_x86\_64.whl - [daisy-2.0.1.dist-info/sboms/daisy-py.cyclonedx.json](https://pypi.sbomify.com/artifact/93378e17-eed6-518f-8527-31f96f96f5dd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 5 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2025-0141](https://osv.dev/vulnerability/RUSTSEC-2025-0141) | unknown | bincode 2.0.1 (crates.io) | none listed | Bincode is unmaintained | | [RUSTSEC-2026-0186](https://osv.dev/vulnerability/RUSTSEC-2026-0186) | unknown | memmap2 0.9.10 (crates.io) | 0.9.11 | Unchecked pointer offset in crate \`memmap2\` | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.52.1 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/daisy@2.0.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/daisy/2.0.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/daisy/2.0.1