# SBOM for hydraters 0.1.3

> Hydrate Python dictionaries with Rust.

The Python package hydraters 0.1.3 ships 19 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/hydraters@0.1.3`
- PyPI: https://pypi.org/project/hydraters/0.1.3/
- Requires Python: \>=3.9
- Repository: <https://github.com/developmentseed/hydraters>

## SBOMs

### hydraters-0.1.3-cp314-cp314-macosx\_10\_12\_x86\_64.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/4c71ab5e-03fa-5527-8541-b782dbfbab38/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/21dfd035-2649-56c4-bbf1-7245de63b917/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/60dafaa9-cf11-5342-99f4-5a68f0d73621/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/6e7472cc-c89f-5720-98f0-6ae646a01746/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/5b6f60f7-3c3e-51e3-ace6-1da68cd4aee8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314-musllinux\_1\_2\_aarch64.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/021eee04-8dc1-51c5-9966-4be37b565749/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314-musllinux\_1\_2\_armv7l.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/7c90153a-8bfc-5615-91ba-6b9289133287/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314-musllinux\_1\_2\_i686.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/02f3b492-e284-56bf-a30c-d7ab6056d6e9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/05def814-4341-54dd-8bf7-ce4d78dbb2ec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/52a21da2-a656-5121-9dc1-d4ee87f0ffec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/21c799f2-a3a9-5a13-8d28-44b8d5719fd0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314t-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/cee2f202-e4e5-5306-821e-1470c0be6098/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314t-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/c70f9604-44d3-56dd-a01a-e987b9f02a8f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/2180ad26-62e3-5ef9-94d5-f04a8d3b065a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314t-musllinux\_1\_2\_armv7l.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/349d9ce8-68f2-57fc-80a4-1d5d7be8d536/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314t-musllinux\_1\_2\_i686.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/c1ec2826-b812-5d81-99fd-1c803533235b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/1d57c97e-dd3d-59cb-9f6d-7ec21a834d09/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/a097b111-3ac9-5844-9e76-9f214470e28a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### hydraters-0.1.3-cp315-cp315-manylinux\_2\_5\_i686.manylinux1\_i686.whl

- [hydraters-0.1.3.dist-info/sboms/hydraters.cyclonedx.json](https://pypi.sbomify.com/artifact/1ff13809-e9ec-5aba-89d5-444346215ddf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/hydraters@0.1.3
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/hydraters/0.1.3.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/hydraters/0.1.3