# SBOM for opendate 0.1.50 > Python business datetimes The Python package opendate 0.1.50 ships 28 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/opendate@0.1.50` - PyPI: https://pypi.org/project/opendate/0.1.50/ - Requires Python: \>=3.10 - Repository: ## SBOMs ### opendate-0.1.50-cp310-cp310-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/3305aee3-fda7-5352-9977-a69cbd12733e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp310-cp310-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/c2dab236-f1a8-5dcf-9f2f-f67e7567c13c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/72b26d1a-4d7a-5931-813b-a21714125524/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/22a41460-b7fc-5d43-855f-4c3c41642b1c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp310-cp310-musllinux\_1\_1\_aarch64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/496287ce-bdd0-5186-82a2-ca3d2fe141b2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp310-cp310-musllinux\_1\_1\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/dd7e072e-2f33-5f77-a3a0-73a8c8f445e5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/8fff1a49-3458-5249-ae2b-893b9a55dbf7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp311-cp311-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/6e11af5c-732b-5211-a0c7-18c6215f9c30/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/01bc199e-5feb-5dc3-a70d-5584c1dd235a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/9d797830-d120-5f01-996a-bc494b471595/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/59ce20ff-9afb-5c85-8d0b-22ee1876999a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp311-cp311-musllinux\_1\_1\_aarch64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/b6fa82e8-f74a-5cc9-ad67-a37e9d9b353f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp311-cp311-musllinux\_1\_1\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/2abeee8a-44ac-59cd-8cd5-33b612a3d24e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/e0ce3fc5-f0ee-5c4f-bfa5-0acd7f11c6f7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/21fcbf8b-d513-5967-b0f3-ef5d2cd78e63/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/2ec49bbe-bcb6-5df9-860e-3ab425ee23d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/9901fcc0-b490-562c-a660-7e53b544fd3c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/0dfc3f7e-e1ec-565d-8233-8ed60bb192b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp312-cp312-musllinux\_1\_1\_aarch64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/3432031b-44b4-5a67-b665-1291dee96630/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp312-cp312-musllinux\_1\_1\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/f26bbbd5-6ad3-5bb3-b372-41d131e86334/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/7af5c30c-7e02-5f9f-a324-d27be5cee40d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/411d1f2e-9b2d-5569-9bad-3e7482f11cb5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/0e4bbd68-4624-5984-a648-bfd222a880a3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/26b0bb9e-8994-56ea-98c5-aaa91874474b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/aae23b89-19b0-520d-8574-054db0a487ee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp313-cp313-musllinux\_1\_1\_aarch64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/fc06edaa-322c-5113-b650-d23e234b78e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp313-cp313-musllinux\_1\_1\_x86\_64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/e6e05eef-194a-5448-95e1-6ad1ff0846cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### opendate-0.1.50-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, bissli/opendate, workflow release.yml). - [opendate-0.1.50.dist-info/sboms/\_opendate.cyclonedx.json](https://pypi.sbomify.com/artifact/1bfcc6ea-7c5c-5d89-b958-c4a3d7480a11/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.22.6 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.22.6 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.22.6 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/opendate@0.1.50 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/opendate/0.1.50.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/opendate/0.1.50