# SBOM for misu 2.1.0 > Fast quantities (units of measurement) for Python — Rust-powered. The Python package misu 2.1.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/misu@2.1.0` - PyPI: https://pypi.org/project/misu/2.1.0/ - License: MIT - Requires Python: \>=3.9 - Homepage: - Source: ## SBOMs ### misu-2.1.0-cp314-cp314t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/e273d98c-f598-5066-84e4-f785da22c102/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### misu-2.1.0-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/c1268505-2cad-5f52-ad2c-5857372fc475/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### misu-2.1.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/d280da2c-0072-56a2-818c-1f3d9140f402/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### misu-2.1.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/ae9ee356-fda4-5071-b1dd-0f878b28bb37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### misu-2.1.0-cp314-cp314t-win\_amd64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/a5a93c82-00c7-5521-9d3c-907e4915947c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### misu-2.1.0-cp39-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/49b0bdca-466b-59f8-bf40-70592c16ea25/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### misu-2.1.0-cp39-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/3f97387d-fad4-56d8-8221-fde8ed341c43/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### misu-2.1.0-cp39-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/2f4fbb7e-e2cb-5734-aacd-02d8ddc5ce91/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### misu-2.1.0-cp39-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/6577a179-02e6-54d5-a21b-b67c39634fb1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### misu-2.1.0-cp39-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, cjrh/misu, workflow release.yml). - [misu-2.1.0.dist-info/sboms/misu\_engine.cyclonedx.json](https://pypi.sbomify.com/artifact/894c75af-da87-5be8-a205-d3f20215297e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/misu@2.1.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/misu/2.1.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/misu/2.1.0