# SBOM for orthographic-projector 0.2.2

> Generate orthographic projections from a Point Cloud.

The Python package orthographic-projector 0.2.2 ships 9 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/orthographic-projector@0.2.2`
- PyPI: https://pypi.org/project/orthographic-projector/0.2.2/
- Requires Python: \>=3.10
- repository: <https://github.com/arthurhscarvalho/orthographic_projector>

## SBOMs

### orthographic\_projector-0.2.2-cp310-cp310-macosx\_11\_0\_arm64.whl

- [orthographic\_projector-0.2.2.dist-info/sboms/orthographic\_projector.cyclonedx.json](https://pypi.sbomify.com/artifact/77f2d0b6-9630-59df-9c89-0f6891977a46/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### orthographic\_projector-0.2.2-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

- [orthographic\_projector-0.2.2.dist-info/sboms/orthographic\_projector.cyclonedx.json](https://pypi.sbomify.com/artifact/95f3b56c-4aed-5592-8fc1-21bf62c82b4c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### orthographic\_projector-0.2.2-cp310-cp310-win\_amd64.whl

- [orthographic\_projector-0.2.2.dist-info/sboms/orthographic\_projector.cyclonedx.json](https://pypi.sbomify.com/artifact/3da59dd6-564c-53c4-971b-b4b0f6db3325/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### orthographic\_projector-0.2.2-cp311-cp311-macosx\_11\_0\_arm64.whl

- [orthographic\_projector-0.2.2.dist-info/sboms/orthographic\_projector.cyclonedx.json](https://pypi.sbomify.com/artifact/978eb584-2c1f-5984-9923-db2e7451c642/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### orthographic\_projector-0.2.2-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [orthographic\_projector-0.2.2.dist-info/sboms/orthographic\_projector.cyclonedx.json](https://pypi.sbomify.com/artifact/39679b7f-ef5b-5c34-ac21-42ce6287935e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### orthographic\_projector-0.2.2-cp311-cp311-win\_amd64.whl

- [orthographic\_projector-0.2.2.dist-info/sboms/orthographic\_projector.cyclonedx.json](https://pypi.sbomify.com/artifact/23ba52a2-ed60-59a7-94c1-fe9c063eae8a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### orthographic\_projector-0.2.2-cp312-cp312-macosx\_11\_0\_arm64.whl

- [orthographic\_projector-0.2.2.dist-info/sboms/orthographic\_projector.cyclonedx.json](https://pypi.sbomify.com/artifact/9efabe21-165c-5a76-a978-5380bbfe8393/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### orthographic\_projector-0.2.2-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [orthographic\_projector-0.2.2.dist-info/sboms/orthographic\_projector.cyclonedx.json](https://pypi.sbomify.com/artifact/6085172d-df1b-51ec-80fd-034dd2dc47f2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### orthographic\_projector-0.2.2-cp312-cp312-win\_amd64.whl

- [orthographic\_projector-0.2.2.dist-info/sboms/orthographic\_projector.cyclonedx.json](https://pypi.sbomify.com/artifact/53e6bb03-d863-5496-a67e-779e47a7fd9b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.24.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.24.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/orthographic-projector@0.2.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/orthographic-projector/0.2.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/orthographic-projector/0.2.2