# SBOM for powerfit-em 6.1.0 > Rigid body fitting of high-resolution structures in low-resolution cryo-electron microscopy density maps The Python package powerfit-em 6.1.0 ships 28 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/powerfit-em@6.1.0` - PyPI: https://pypi.org/project/powerfit-em/6.1.0/ - Requires Python: \<4.0,\>=3.11 - Homepage: - documentation: - issues: - source: - tutorial: ## SBOMs ### powerfit\_em-6.1.0-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a830c7fd-f87f-5f62-9851-b3328e8f77f5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/efc2575d-4dce-5e09-8be9-da0254a1aa5f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/88593606-6ac5-51af-ab40-ce7bc9c0820b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b53dedf5-e551-5c07-a8da-d14be6349a89/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/6156b4f2-1932-51b3-a69f-c78316b2f37b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp312-cp312-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f223bf35-135c-5dd9-bc91-0293fa4e9ea1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/9c92e474-094a-582c-903e-5c1048a0116e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/3ce14377-b745-5d55-b03f-41d69d0eaaa9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/6499f66a-6fcb-5242-b891-2dfe7b75b1b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp313-cp313-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/21907f8b-06e2-5d7c-bb6d-66f572d3d4a1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/6aa85547-2f0f-5288-960c-30ea8a80bc85/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b07bd1ae-94f6-51fe-9f5c-64da9532724d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5af9af50-d3c0-53f2-868a-887af8e3a6e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/72de3813-8a65-5175-9832-6ef2f983ab94/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7b501828-d694-53f5-821f-ef766b223789/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/950f8fc9-32a7-575f-a98b-5a0b623defd3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/67828d5d-e5de-5c71-869d-2adf22b1571c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d97bac81-e24b-5902-8d83-6c1e9dce83a8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/694b0335-c215-5b1e-b7b8-1fc957572ca3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314-pyemscripten\_2026\_0\_wasm32.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7809e0b7-0d89-5389-8cc2-b9c24d7b82b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d374cae3-88a7-55ce-b58d-66641f08b6de/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/bd46ce75-6a44-5336-9e27-dabd7236e4ed/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314t-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/cce2b057-2787-5130-a768-049bc9b22c9b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/bf6988e8-615d-5999-a227-45581cb69b1d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ea60642b-5c1a-535b-b6bf-ff4bf411dac6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2da8b8f1-ffef-5db8-bd90-1fae96eac652/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### powerfit\_em-6.1.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, haddocking/powerfit, workflow pypi-publish.yml). - [powerfit\_em-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6ed19a75-cde0-507f-b9ec-0c9e9481b956/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [powerfit\_em-6.1.0.dist-info/sboms/powerfit\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/79ff9e77-630f-56ed-bb61-26864cc70d5d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/powerfit-em@6.1.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/powerfit-em/6.1.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/powerfit-em/6.1.0