# SBOM for openstep-plist 0.5.2 > ASCII plist parser written in Cython The Python package openstep-plist 0.5.2 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/openstep-plist@0.5.2` - PyPI: https://pypi.org/project/openstep-plist/0.5.2/ - Author: Cosimo Lupo - License: MIT - Requires Python: \>=3.8 - Homepage: ## SBOMs ### openstep\_plist-0.5.2-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cf42afd4-be49-530d-9fbc-ed7bd273dd57/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/77317e79-959a-5684-919e-d3c1bb40573d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/547931ca-4ec4-5ed2-b271-e6ea305341e6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a2cd7638-af81-564a-a5ce-3df2ac50f1f3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a363d835-4769-5c70-a58f-dfc008e547c0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/877bfacc-c673-5d10-b2e2-a8bbbca90b6d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2845a274-23e0-5e05-85f4-0defb5a465d7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d6401695-5804-5b97-bd90-9dc57768b04d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce3d2e51-ca0d-5e89-9f14-18e60edd120e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/600a600d-caf0-5973-b265-a789b22716ec/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/033aef98-1e6f-5997-b8be-e0fdcb86e4e2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c20f8526-bd7f-541c-9929-23ac8987f87f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp38-cp38-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a257e0aa-bcbf-588f-af17-a509ae4ae03a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp38-cp38-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dc5fce39-6f44-5d63-99bf-1aef7cebecee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dfcb41e0-7428-5a46-9484-85a58c56cd69/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### openstep\_plist-0.5.2-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, fonttools/openstep-plist, workflow wheels.yml). - [openstep\_plist-0.5.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cccb51c5-bed8-5fb4-8f81-844291bbb677/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/openstep-plist@0.5.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/openstep-plist/0.5.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/openstep-plist/0.5.2