Skip to content

SBOM for dotenvage 0.8.17

Python bindings for dotenvage - encrypt secrets in .env files using age encryption

CycloneDX PEP 740 attested 2 known vulnerabilities

Requires Python: >=3.10
PyPI: dotenvage 0.8.17
Documentation: https://docs.rs/dotenvage
Homepage: https://github.com/legra-ai/dotenvage
Repository: https://github.com/legra-ai/dotenvage

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

dotenvage-0.8.17-cp310-abi3-macosx_10_12_x86_64.whl

Attested

Publisher: GitHub Source: legra-ai/dotenvage Workflow: ci.yml Environment: pypi

dotenvage-pyo3.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 2 known vulnerabilities

dotenvage-0.8.17-cp310-abi3-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: legra-ai/dotenvage Workflow: ci.yml Environment: pypi

dotenvage-pyo3.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 2 known vulnerabilities

dotenvage-0.8.17-cp310-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl

Attested

Publisher: GitHub Source: legra-ai/dotenvage Workflow: ci.yml Environment: pypi

dotenvage-pyo3.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 2 known vulnerabilities

dotenvage-0.8.17-cp310-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl

Attested

Publisher: GitHub Source: legra-ai/dotenvage Workflow: ci.yml Environment: pypi

dotenvage-pyo3.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 2 known vulnerabilities

dotenvage-0.8.17-cp310-abi3-win_amd64.whl

Attested

Publisher: GitHub Source: legra-ai/dotenvage Workflow: ci.yml Environment: pypi

dotenvage-pyo3.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 2 known vulnerabilities

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0374 `basic-toml` is unmaintained	Unknown	basic-toml 0.1.10 crates.io	—
RUSTSEC-2026-0387 Multiple timing variability issues in operations intended to be constant-time	Unknown	crypto-bigint 0.5.5 crates.io	0.7.6

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]