# SBOM for lstring 0.0.9 > True Python lazy string (rope-like) implemented as a C++ extension The Python package lstring 0.0.9 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/lstring@0.0.9` - PyPI: https://pypi.org/project/lstring/0.0.9/ - Author: Vsevolod Novikov - License: LGPLv3 - Requires Python: \>=3.10 - Homepage: - Issues: - Source: ## SBOMs ### lstring-0.0.9-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/737c172c-e073-595a-8db0-461cf3c4e2a7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### lstring-0.0.9-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4292f76a-1845-554d-884d-ab2eff98ab02/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### lstring-0.0.9-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2eeaf8b4-e964-5184-a1db-b426b457b902/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### lstring-0.0.9-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1f2c2a6c-ad38-5b1c-961d-574313e573df/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### lstring-0.0.9-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c415def8-a10e-5d76-a45a-ee299cdeeea6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### lstring-0.0.9-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2e173d33-e169-5c1a-a890-71cf5dfd69c7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### lstring-0.0.9-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8eed9846-c6e7-5daa-bedf-6f0d7496c81e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### lstring-0.0.9-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1285b8fc-f30c-570e-b570-45d8267973fc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### lstring-0.0.9-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b2536bda-22e1-54eb-afb3-034eab514211/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### lstring-0.0.9-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nnseva/python-lstring, workflow publish.yml). - [lstring-0.0.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/afe9fce5-27b7-53d0-ab60-5df91cc457f1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/lstring@0.0.9 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/lstring/0.0.9.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/lstring/0.0.9