# SBOM for fm-index 4.0.0 > High-performance FM-index powered by Rust, enabling fast substring search and count/locate queries. The Python package fm-index 4.0.0 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/fm-index@4.0.0` - PyPI: https://pypi.org/project/fm-index/4.0.0/ - Requires Python: \>=3.11 - documentation: - repository: ## SBOMs ### fm\_index-4.0.0-cp311-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/1b9d2c1a-b211-50c1-95fc-5b89ed89edf0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/514a4d27-9841-5039-849d-00f550b8315f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/958458f7-810d-5153-93e9-089502f3a8c7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/bc50f754-6903-59f0-9c20-79f911eb8053/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-manylinux\_2\_17\_i686.manylinux2014\_i686.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/3b7680ab-5da4-5518-af4a-91899f2adf77/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/8cb9f836-6bb5-5f16-874e-d6fd418ccad9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/4dd29ade-6a55-552d-859b-86ac34aad40c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/c79c8e89-18cc-5e54-8412-b84836d86b12/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/e9bf523a-eca0-58d1-ba03-cb74d6d898d4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/03cda654-98a0-5c83-aa53-af45c19bbe07/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/4521ff8b-408c-5c2d-80e4-b71a1d812b1e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/7785ae38-3ee2-5035-ae98-59b48003f975/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-win32.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/94e051f8-1bc7-5a3f-9253-c9a78136b82f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### fm\_index-4.0.0-cp311-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, math-hiyoko/fm-index, workflow CI.yml). - [fm\_index-4.0.0.dist-info/sboms/fm-index.cyclonedx.json](https://pypi.sbomify.com/artifact/43de2da9-3f56-5289-8afa-a5f252c90bbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/fm-index@4.0.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/fm-index/4.0.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/fm-index/4.0.0