# SBOM for kio 0.7.0 > Python data types for the Apache Kafka® Protocol. The Python package kio 0.7.0 ships 37 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/kio@0.7.0` - PyPI: https://pypi.org/project/kio/0.7.0/ - Requires Python: \>=3.11 - Bug Tracker: - Documentation: - Source Repository: ## SBOMs ### kio-0.7.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/3ddec8fc-cc51-533b-87d6-497c2cae4513/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/78adcd77-89cf-57ca-8555-3afe11d9bd6b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/a5cec652-1ec6-591f-91c5-605d59311253/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/b37f8052-f336-58ec-8fa1-d3f468f49b8d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/353c9ce7-30b5-50b6-8009-c641b1360aa3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/6c1cccf1-c3d0-51a3-bd1a-4c4fb9976ea1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/e70b6c14-ba57-5130-903d-7710673c3016/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/2d040e0e-ff5f-50dc-bb47-790de373d6bd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/d474a38f-62ba-52e4-ab4f-00272af5d111/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp312-cp312-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/7d8d3108-0ce4-55ea-b339-d3c82b3ce7fc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/bd83023c-6261-51ab-8b80-1e29e3e427c0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/4f6991bd-1029-5d7b-9645-554ed09f302a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/16a3b1c3-a746-53a2-953b-a0705d040a80/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/5b230951-8cb1-5e38-aeb6-9bf2941f70a5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/03299d2d-b38e-51c5-8ecf-6604f6eb482d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/66174910-f6a1-5434-b020-d2b2c7f66983/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp313-cp313-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/0fae1886-bee4-58dd-8611-ab5cbb38b887/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/b34541e9-65b3-5a77-b23f-7df4db36db20/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/9d2cd73b-ee65-544e-a83e-fba4fce2edf0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/56659fb6-172d-5039-85c6-5956a229a5f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/7bf4297d-beb9-513e-8628-b236c3020a9a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/b75b9d8a-fbc0-5c9e-80e0-7db82fda16f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/acd50a75-6bc9-5422-b232-62ccf4128ea8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp314-cp314-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/f1c2f77c-5d0b-5dd4-be81-12e197be9e0b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/c164f8fa-3c65-5f42-a7c3-3f8581bd7b75/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/a672c496-d61d-5d25-abf0-cc4da8cb2679/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/74c5d243-7875-5df1-8fea-5187c278e7da/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/c05feb8c-db1d-54ef-b6a8-f0a308a2634d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp315-cp315-macosx\_10\_12\_x86\_64.whl PEP 740 attestation failed verification: Failed to refresh TUF metadata. - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/1172b9a5-9737-5165-a200-f576c73d0a9f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp315-cp315-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/2a875d1f-d9ee-570a-9fe4-3b3cc9f855d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp315-cp315-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/6cdd2001-2de4-5aaa-be63-b9af15462f15/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp315-cp315-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/8e82f3d0-bc0a-5168-9f50-4b98c16567a5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/d814eba7-5e67-5b5b-a4d9-2514f910fa2e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/cc19e61f-8cc6-5cf3-af8b-bc756a2c25c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp315-cp315-win\_amd64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/d067f470-bfd4-5e54-b409-135c33071331/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp315-cp315t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/70182ee7-cd85-5e81-b3a8-4b8f0dc4238e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### kio-0.7.0-cp315-cp315t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Aiven-Open/kio, workflow release.yaml). - [kio-0.7.0.dist-info/sboms/python-kio.cyclonedx.json](https://pypi.sbomify.com/artifact/b945c950-7d87-59b9-aa80-bfb40531cc0a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/kio@0.7.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/kio/0.7.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/kio/0.7.0