# SBOM for marisa-bindings 1.0.6

> Thin Python bindings for the C++ MARISA Trie library implemented using SWIG.

The Python package marisa-bindings 1.0.6 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/marisa-bindings@1.0.6`
- PyPI: https://pypi.org/project/marisa-bindings/1.0.6/
- Requires Python: \>=3.10
- Documentation: <https://marisa-bindings.readthedocs.io/>
- Issue Tracker: <https://github.com/juno-rmks/marisa-bindings/issues/>
- Source Code: <https://github.com/juno-rmks/marisa-bindings/>

## SBOMs

### marisa\_bindings-1.0.6-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/336a30a8-7f33-55c5-b34f-8f2659c5f594/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### marisa\_bindings-1.0.6-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/72ac201c-0659-56c1-b0a8-0dd29927dd27/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### marisa\_bindings-1.0.6-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2fc926d6-0f72-5a06-bc4c-c6b68d0f6f97/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### marisa\_bindings-1.0.6-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c38ef563-1a82-5fe3-9014-7debf11c1f8c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### marisa\_bindings-1.0.6-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c28f9006-ff41-59c8-9dbf-2e9865afcd08/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### marisa\_bindings-1.0.6-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce732aeb-fb4d-5347-bf3d-72b243a7ac46/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### marisa\_bindings-1.0.6-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fab90837-be99-568e-92fe-6ce62a96499e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### marisa\_bindings-1.0.6-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fa6c9161-8af6-58be-914c-14e33bcb0739/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### marisa\_bindings-1.0.6-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8a57f09f-0b4c-562a-a3f4-430e4751eea0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### marisa\_bindings-1.0.6-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, juno-rmks/marisa-bindings, workflow release-pypi.yaml).

- [marisa\_bindings-1.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cf15e2e7-18ac-5db4-9c9a-b0607e8bc481/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/marisa-bindings@1.0.6
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/marisa-bindings/1.0.6.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/marisa-bindings/1.0.6