# SBOM for orphos 0.4.0

> Python bindings for Orphos - a gene prediction tool for microbial genomes

The Python package orphos 0.4.0 ships 32 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/orphos@0.4.0`
- PyPI: https://pypi.org/project/orphos/0.4.0/
- Author: Orphos Contributors
- License: GPL-3.0-or-later
- Requires Python: \>=3.8
- Homepage: <https://github.com/FullHuman/orphos>
- Repository: <https://github.com/FullHuman/orphos>

## SBOMs

### orphos-0.4.0-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c9140298-9e5a-551b-849c-99462438b2b4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e76ec358-7281-5b27-8bd4-cd6e0cd97dbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp310-cp310-win\_amd64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/6014e5ed-dac1-5fad-886d-bac43ef62b3c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/bb117080-060e-5822-bea9-9c2becf3614a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp311-cp311-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/574a4a2f-1eaa-553a-bfcc-e9ff88d4782e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/2077d54c-f2cd-553f-b9d9-b8d8705cff7d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/70ea9d1a-9b9e-5c1a-9db6-af0b06c13841/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp311-cp311-win\_amd64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/07c2600e-4f5f-5951-bcbe-4969e42761a8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/4983aa33-3957-5546-9fa7-feffb5c47dfa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp312-cp312-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/8aed3c8c-6a57-5a54-8811-e271cee04a9b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/20e07d50-9909-5c1b-b131-98f72009fa7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/d5e82586-5ac2-5e8e-9bf6-f03d8db5ffd6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp312-cp312-win\_amd64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/635368a6-27c0-5d85-9092-39455f2adf1a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/0f805b5d-2f9c-5fdd-8601-1097561ba7b3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp313-cp313-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/473134b1-faf9-5600-845f-c1e5d9aa3971/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e5e22668-46af-5533-8b5a-44666af971ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c74cf485-936f-5b2a-a5b0-7833fc92463d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp313-cp313-win\_amd64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ec5c3afd-788c-5a2d-a099-e49b5c90ba6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/90c98c53-95f5-51f2-9c20-b7c0e826c831/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp314-cp314-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/4efd3fcc-f278-5e57-840d-26020a5dca11/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/243e6302-10eb-5d46-b905-1b7c02b59b9d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/6136b388-ea7a-5347-95a8-0578f995409a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp314-cp314-win\_amd64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/60c48463-237f-5ac5-9668-bae28cec5b94/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/885fb172-9891-573f-a559-249dbab7e307/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/56ef1ed1-dd2e-5359-8019-ad8897551c90/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/729e4224-775e-53d0-ba13-b3c95b4b146b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/698c5089-1bca-5c7d-a221-d6b2d975076e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp38-cp38-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/6c0f4853-4b69-5b1e-bf3b-931e13578a23/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/fa3bb1ef-9f8a-51f8-a6d8-291f7d7f220e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/a5842e84-ee82-5034-bb3a-df81a3adaa8f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/3cda13ae-852e-55e2-90c4-28b7a6f9266a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### orphos-0.4.0-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, FullHuman/orphos, workflow publish-pypi.yml).

- [orphos-0.4.0.dist-info/sboms/orphos-python.cyclonedx.json](https://pypi.sbomify.com/artifact/5fb97bea-8f3e-5987-9880-746c68aa514d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2025-0058](https://osv.dev/vulnerability/RUSTSEC-2025-0058) | unknown | custom\_derive 0.1.7 (crates.io) | none listed | custom\_derive crate is unmaintained |
| [RUSTSEC-2025-0057](https://osv.dev/vulnerability/RUSTSEC-2025-0057) | unknown | fxhash 0.2.1 (crates.io) | none listed | fxhash - no longer maintained |
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/orphos@0.4.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/orphos/0.4.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/orphos/0.4.0