# SBOM for glassure 3.0.0

> X-ray total-scattering analysis with a Rust numerical core

The Python package glassure 3.0.0 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/glassure@3.0.0`
- PyPI: https://pypi.org/project/glassure/3.0.0/
- Requires Python: \>=3.10

## SBOMs

### glassure-3.0.0-cp310-cp310-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/0828a2e0-01a5-5c88-9b9a-2da37a114fc9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp310-cp310-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ed799fd1-9013-55eb-8817-fb0c0db8ec16/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/78019242-97aa-589a-bb79-c884d3c38fd4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp310-cp310-win\_amd64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/576355b4-3c28-55ca-98f0-b494a100d068/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/358f0b02-fe34-5a05-ae62-196515df6c27/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp311-cp311-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/d99395c7-1021-59a9-9181-5fdc80b6aacb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/5e241d00-7445-5ae8-8164-65db057bcea5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp311-cp311-win\_amd64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/292ed63c-05da-5fc3-8849-773c2018014c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/36c849c8-691e-5eea-93ab-7258e50f19ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp312-cp312-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ee548b42-9842-5001-bc17-602ef444b559/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/46de2043-518a-5231-b48b-389d362b7725/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp312-cp312-win\_amd64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e169206d-89cb-5d83-9910-a7e49087c7e6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/9702ffc1-918c-5be7-8de7-242b499d715e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp313-cp313-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/fec0841b-5f4a-50a3-af18-280038a51cfe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/9681df1b-a1cd-50c2-b425-a71fbdb26b77/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### glassure-3.0.0-cp313-cp313-win\_amd64.whl

PEP 740 attestation verified (GitHub, CPrescher/Glassure, workflow CD.yml).

- [glassure-3.0.0.dist-info/sboms/glassure-python.cyclonedx.json](https://pypi.sbomify.com/artifact/bf8f1399-ddfa-5a21-8632-b4a95cbdacaf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/glassure@3.0.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/glassure/3.0.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/glassure/3.0.0