# SBOM for horus-robotics 0.4.1

> Simple & intuitive Python API for HORUS robotics framework - ultra-low latency IPC and real-time scheduling

The Python package horus-robotics 0.4.1 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/horus-robotics@0.4.1`
- PyPI: https://pypi.org/project/horus-robotics/0.4.1/
- Author: HORUS Contributors
- License: Apache-2.0
- Requires Python: \>=3.9
- Documentation: <https://docs.horusrobotics.dev>
- Homepage: <https://github.com/softmata/horus>
- Issues: <https://github.com/softmata/horus/issues>
- Repository: <https://github.com/softmata/horus>

## SBOMs

### horus\_robotics-0.4.1-cp39-abi3-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, softmata/horus, workflow build-wheels.yml).

- [horus\_robotics-0.4.1.dist-info/sboms/horus\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/150d8974-15d3-5c65-bb30-3603dd367fa1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### horus\_robotics-0.4.1-cp39-abi3-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, softmata/horus, workflow build-wheels.yml).

- [horus\_robotics-0.4.1.dist-info/sboms/horus\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/c9c44c2a-9a6d-5dc4-840b-5a0de6b83cf1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### horus\_robotics-0.4.1-cp39-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, softmata/horus, workflow build-wheels.yml).

- [horus\_robotics-0.4.1.dist-info/sboms/horus\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/83842533-6e10-5fc3-a663-5f843e8f56f5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### horus\_robotics-0.4.1-cp39-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, softmata/horus, workflow build-wheels.yml).

- [horus\_robotics-0.4.1.dist-info/sboms/horus\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/ce34ec3b-409c-53d9-b646-e31caa43ce94/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

### horus\_robotics-0.4.1-cp39-abi3-win\_amd64.whl

PEP 740 attestation verified (GitHub, softmata/horus, workflow build-wheels.yml).

- [horus\_robotics-0.4.1.dist-info/sboms/horus\_py.cyclonedx.json](https://pypi.sbomify.com/artifact/6236a1bd-198e-5119-afb6-3748ce885a9a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2025-0141](https://osv.dev/vulnerability/RUSTSEC-2025-0141) | unknown | bincode 1.3.3 (crates.io) | none listed | Bincode is unmaintained |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |
| [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.53.1 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety |
| [RUSTSEC-2024-0449](https://osv.dev/vulnerability/RUSTSEC-2024-0449) | unknown | unsafe-libyaml 0.2.11 (crates.io) | none listed | unsafe-libyaml is unmaintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/horus-robotics@0.4.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/horus-robotics/0.4.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/horus-robotics/0.4.1