# SBOM for oxiz 0.3.4 > Python bindings for OxiZ SMT Solver The Python package oxiz 0.3.4 ships 32 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/oxiz@0.3.4` - PyPI: https://pypi.org/project/oxiz/0.3.4/ - License: Apache-2.0 - Requires Python: \>=3.8 - Documentation: - Homepage: - Repository: ## SBOMs ### oxiz-0.3.4-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ee97dc07-b100-565e-99cc-492dfd36b28c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b2bc0863-efd1-5eb4-9acf-b61a0137b726/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0ffa81df-e5f1-5862-89a2-4e2efec26d85/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp311-cp311-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4ca5caf8-b45c-5e25-b3a8-af50965d9a97/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/fdf8052d-0664-5de5-81f1-927f1c79cd8e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e9a1c4f2-eab5-50eb-b350-12b828a97cd7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6e5aff47-6a6e-5304-82f4-5cac290ba21a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/aaa8aaf8-f924-568d-973e-677f48c7520b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8e3aa5a8-b79c-5044-8bc7-244fc223411e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/1446a82b-617a-5183-a61d-78e7542e98b7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8c8fc72c-f993-594f-aa38-f7813c748772/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/7127ac45-016b-5590-90d7-18ab19e24d6a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/c328e766-2ce8-53eb-b0ce-bcc49057ac44/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3713b798-9bd1-528d-a724-1aa6de79d86d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/bd0adb20-72cc-5f13-91cc-9cd3f96dcc0f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6aa8ee21-ca15-5013-ac3e-0182920e3989/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3e381841-d7a8-5c9a-b0cc-b712398d621d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/23204fbf-06ae-5282-a163-801c387af172/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp314-cp314-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/d153ee40-1143-5579-bf29-1f5aca015136/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/555800e0-53ea-525e-90c2-bf141b00d52b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3804adda-c089-5324-9c10-3afb6699aedc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3a7a89b6-e447-50da-88e3-33a496e9b00a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/2ef82821-7597-50ee-af54-6055c09e6ba3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ae1298e0-9c26-5b1f-bff6-c55ddef03355/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ef64cb98-c5e1-55d1-96f9-c32b9d0f0c95/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4ac13489-2e48-5db9-90e6-b2da8299721f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/67049436-0b2c-5c5b-b140-f2c6252cb5a9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp38-cp38-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0e35c96d-f631-557f-847d-ec193670b592/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/43a16eaa-7ea1-524b-b086-59a25ca7f890/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/63c833ff-e967-5455-85c5-60a688e10a62/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0e3b42c9-dd8e-5efd-bad1-1a50114ecb3a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### oxiz-0.3.4-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, cool-japan/oxiz, workflow pypi-publish.yml). - [oxiz-0.3.4.dist-info/sboms/oxiz-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ca3b2fac-d883-5f23-9983-097a2227e307/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0249](https://osv.dev/vulnerability/RUSTSEC-2026-0249) | unknown | smartstring 1.0.1 (crates.io) | none listed | smartstring is unmaintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/oxiz@0.3.4 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/oxiz/0.3.4.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/oxiz/0.3.4