# SBOM for oxifish 0.3.0 > Python bindings for the RustCrypto Twofish block cipher implementation The Python package oxifish 0.3.0 ships 32 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/oxifish@0.3.0` - PyPI: https://pypi.org/project/oxifish/0.3.0/ - Author: Corey Leavitt - License: MIT - Requires Python: \>=3.11 - Homepage: - Issues: - Repository: ## SBOMs ### oxifish-0.3.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/b7221472-eb32-58d1-9192-ef011178e142/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/8f652f9f-b66e-561c-b8ff-f158990f4eb1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/c421edfe-99ce-503d-9fcd-57e3deae8b54/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/70b770f5-bb91-5d45-911f-868f19d629a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp311-cp311-manylinux\_2\_5\_i686.manylinux1\_i686.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/0ed68167-a427-5cde-b2f6-e76adb050aa8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/4006d8ba-bc1f-5a48-8797-d432e4a3e604/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/3d0aea3c-c304-5ed8-8a4b-95dbff1d6f33/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/2359d5cd-3002-5ebb-a12d-c04529a81c80/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/16f1691a-e7ae-5e99-bd60-7b686f1771b3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/f3092d5e-f739-58ac-93fd-8ad6205649ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/d18741a5-2c12-5eb8-8581-7951d165a6b8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/d874f6b4-90b5-56cb-afad-8527ce397c14/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp312-cp312-manylinux\_2\_5\_i686.manylinux1\_i686.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/75db1cf7-5fb0-5bd8-be76-0b2d1d3ef8fa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/dc1ba9bc-aaeb-50ec-af41-e2352d67755e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/9d63adc2-5bcf-595f-8a5a-05808488a2af/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/78ab1ce9-5b63-5266-816c-4041326ba760/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/119178ad-3cf0-5ab4-8a1e-fd7cfcfead01/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/6d21982b-1814-5845-a540-f70f97381b7d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/a0d1b64c-e829-5591-8e06-29355e416b37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/03724284-a813-5ef8-ae58-ebb54ee79f26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp313-cp313-manylinux\_2\_5\_i686.manylinux1\_i686.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/e7adb961-f791-5ef4-a50c-fea9bf959fff/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/46576fc7-fca6-5f62-a45f-bc093f28d3e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/18b4d422-f833-55b4-9f70-67a759d3388d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/b04e0b87-0f0d-5091-a71b-045bc3987242/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/7202effa-3b13-5b3b-a659-e0a2b8500a0f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/7050cc8c-4a90-50fa-bb89-145a532ce1c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/174d5def-0184-5794-b9f9-831ef92e43e4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/e41fe1bb-623d-5c96-9248-25f6bd46491c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp314-cp314-manylinux\_2\_5\_i686.manylinux1\_i686.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/e4db516b-15eb-5669-816c-974d9c269071/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/cafb4545-6db5-53f7-8500-775cd7f4c5b3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/be6db485-e962-5e61-b6dd-16ce91175766/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### oxifish-0.3.0-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, coreyleavitt/oxifish, workflow release.yml). - [oxifish-0.3.0.dist-info/sboms/oxifish.cyclonedx.json](https://pypi.sbomify.com/artifact/309a13bc-6b53-5ae1-9cdd-de3bbff12207/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/oxifish@0.3.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/oxifish/0.3.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/oxifish/0.3.0