# SBOM for deimos-daq 0.21.2 > Control-loop and data pipeline for the Deimos data acquisition system The Python package deimos-daq 0.21.2 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/deimos-daq@0.21.2` - PyPI: https://pypi.org/project/deimos-daq/0.21.2/ - Requires Python: \>=3.11 - Homepage: - changelog: - documentation: - repository: ## SBOMs ### deimos\_daq-0.21.2-cp311-abi3-macosx\_10\_12\_x86\_64.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/2aa89373-9719-5b9a-9555-d5d673872475/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-macosx\_11\_0\_arm64.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/6d79237e-ef4d-5d3f-b4b6-ec280a2c8aac/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/ab6f11c0-934c-5246-824c-03fb26e8014a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/f6fa514e-97f9-5497-8228-068b01eb9fe2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/c3a28d4e-6d4f-5869-9310-123bafb3be28/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/12e214dd-b2c3-549a-a7ac-15db0374ea89/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/a5c8f533-7337-5314-8b05-dbce2f6bb292/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-musllinux\_1\_2\_aarch64.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/f81033f3-e368-50bc-8f00-0beb0c66789d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-musllinux\_1\_2\_armv7l.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/9b90b831-ee35-55f9-adcc-d0a6297ba102/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-musllinux\_1\_2\_i686.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/dfbd320e-0cd9-529a-8736-018f5a385fb7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-musllinux\_1\_2\_x86\_64.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/205f4061-db94-5436-9c95-30d3f937d695/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### deimos\_daq-0.21.2-cp311-abi3-win\_amd64.whl - [deimos\_daq-0.21.2.dist-info/sboms/deimos.cyclonedx.json](https://pypi.sbomify.com/artifact/9ed20f5c-07cf-561e-a540-38ee125d0a24/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0385](https://osv.dev/vulnerability/RUSTSEC-2026-0385) | unknown | ctutils 0.4.2 (crates.io) | 0.4.4 | Non-constant-time mask generation and \`u128\` comparisons | | [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.53.1 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/deimos-daq@0.21.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/deimos-daq/0.21.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/deimos-daq/0.21.2