SBOM for libcst 1.9.0

A concrete syntax tree with AST-like properties for Python 3.0 through 3.15 programs.

CycloneDX PEP 740 attested No known vulnerabilities

Package information

License
All contributions towards LibCST are MIT licensed. Some Python files have been derived from the standard library and are therefore PSF licensed. Modifications on these files are dual licensed (both MIT and PSF). These files are: - libcst/_parser/base_parser.py - libcst/_parser/parso/utils.py - libcst/_parser/parso/pgen2/generator.py - libcst/_parser/parso/pgen2/grammar_parser.py - libcst/_parser/parso/python/py_token.py - libcst/_parser/parso/python/tokenize.py - libcst/_parser/parso/tests/test_fstring.py - libcst/_parser/parso/tests/test_tokenize.py - libcst/_parser/parso/tests/test_utils.py - native/libcst/src/tokenizer/core/mod.rs - native/libcst/src/tokenizer/core/string_types.rs Some Python files have been taken from dataclasses and are therefore Apache licensed. Modifications on these files are licensed under Apache 2.0 license. These files are: - libcst/_add_slots.py ------------------------------------------------------------------------------- MIT License Copyright (c) Meta Platforms, Inc. and affiliates. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR …
Requires Python
>=3.9
PyPI
libcst 1.9.0
Changelog
https://github.com/Instagram/LibCST/blob/main/CHANGELOG.md
Documentation
https://libcst.readthedocs.io/en/latest/
Github
https://github.com/Instagram/LibCST

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

libcst-1.9.0-cp310-cp310-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp310-cp310-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp311-cp311-musllinux_1_2_aarch64.whl

Failed
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp311-cp311-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp312-cp312-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp312-cp312-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp313-cp313-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp313-cp313-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp314-cp314-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp314-cp314-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp314-cp314t-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp314-cp314t-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp315-cp315-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp315-cp315-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp315-cp315t-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp315-cp315t-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp39-cp39-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

libcst-1.9.0-cp39-cp39-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Instagram/LibCST Workflow: pypi_upload.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]