# SBOM for digit-bin-index 0.4.3 > A high-performance, O(P) data structure for weighted random sampling of binned probabilities, ideal for large-scale simulations. The Python package digit-bin-index 0.4.3 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/digit-bin-index@0.4.3` - PyPI: https://pypi.org/project/digit-bin-index/0.4.3/ - Author: Lars Rönnbäck \ - License: MIT - Requires Python: \>=3.8 ## SBOMs ### digit\_bin\_index-0.4.3-cp38-abi3-macosx\_10\_12\_x86\_64.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/cf226cbf-76ca-5898-931f-8eb5279c9fda/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-macosx\_11\_0\_arm64.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/c32bc342-98e8-573d-bb89-1b71648fd4f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/db466c23-8737-54b8-a2ec-588432397ff5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/c78ac16a-0498-5e9d-9d7e-c36be738d441/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/a118628f-8ccd-5423-a311-a9e84d6a5882/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/1a636f1f-a493-52d8-8128-0a785d515700/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/7b6ff1c1-3f6b-5bf3-ac05-00caf00701d8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/102818ce-c78d-5e42-8317-0e31f4a3f950/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-musllinux\_1\_2\_aarch64.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/6cf37c59-869a-568f-b8da-92a6300e0c00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-musllinux\_1\_2\_armv7l.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/cf58944f-7bff-544b-bfcf-af9d913930fc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-musllinux\_1\_2\_i686.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/94dff739-eba9-532a-b23f-f044b1889671/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-musllinux\_1\_2\_x86\_64.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/b4339261-6b45-555b-848f-53ab33d1fd60/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-win32.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/10755517-4424-5745-93f4-abf2aed31ce6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### digit\_bin\_index-0.4.3-cp38-abi3-win\_amd64.whl - [digit\_bin\_index-0.4.3.dist-info/sboms/digit-bin-index.cyclonedx.json](https://pypi.sbomify.com/artifact/4e420003-bea7-528b-b4f7-69fabd447a03/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.26.0 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.26.0 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.9.2 (crates.io) | 0.9.3 | Rand is unsound with a custom logger using \`rand::rng()\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/digit-bin-index@0.4.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/digit-bin-index/0.4.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/digit-bin-index/0.4.3