# SBOM for nanobook 0.19.3

> Rust-backed Python package for target-weight backtests, portfolio metrics, deterministic order-book simulation, and pre-trade risk checks

The Python package nanobook 0.19.3 ships 13 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/nanobook@0.19.3`
- PyPI: https://pypi.org/project/nanobook/0.19.3/
- Author: Ricardo Frantz
- Requires Python: \>=3.11
- Documentation: <https://docs.rs/nanobook>
- Homepage: <https://github.com/BoringQuantSystems/nanobook>
- Issues: <https://github.com/BoringQuantSystems/nanobook/issues>
- Repository: <https://github.com/BoringQuantSystems/nanobook>

## SBOMs

### nanobook-0.19.3-cp311-cp311-macosx\_10\_12\_universal2.macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/94e85789-7841-5163-92f1-2175c249b418/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp311-cp311-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e2bbc301-502d-5426-930b-8ae8cb81ac69/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ce0bb4a8-84ae-519c-aa49-717970ca9a31/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp312-cp312-macosx\_10\_12\_universal2.macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/abea6a25-fbd3-5369-9312-11cd7670630c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp312-cp312-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/239f94b6-2ffd-5692-9714-1cfd3db57e72/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/40662ba8-4824-53d2-89a7-1ed3deb66f00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp313-cp313-macosx\_10\_12\_universal2.macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c1f18a5c-2a51-51ef-905a-24eb34a438d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp313-cp313-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/54befbb9-a695-52e7-9272-28ecbdb3b583/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c2baa572-e78f-50e9-af00-01eda1dc288b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp314-cp314-macosx\_10\_12\_universal2.macosx\_10\_12\_x86\_64.macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/57784002-b050-5c04-903c-431150cf861f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp314-cp314-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/1f03c5f7-5aca-5ca2-87b7-56e53bb1cfa1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp314-cp314-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/fc9e222b-45b8-5ff2-bdc1-46f655eda94f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### nanobook-0.19.3-cp314-cp314-win\_amd64.whl

PEP 740 attestation verified (GitHub, BoringQuantSystems/nanobook, workflow wheels.yml).

- [nanobook-0.19.3.dist-info/sboms/nanobook-python.cyclonedx.json](https://pypi.sbomify.com/artifact/fe1d3a4d-e479-5105-84d3-2c6f42af5399/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/nanobook@0.19.3
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/nanobook/0.19.3.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/nanobook/0.19.3