# SBOM for pulsar-client 3.9.0

> Apache Pulsar Python client library

The Python package pulsar-client 3.9.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pulsar-client@3.9.0`
- PyPI: https://pypi.org/project/pulsar-client/3.9.0/
- Author: Pulsar Devs
- License: Apache License v2.0
- Homepage: <https://pulsar.apache.org/>

## SBOMs

### pulsar\_client-3.9.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7658fe58-456a-52b3-9a2b-b2b746377e93/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pulsar\_client-3.9.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dce360a5-9d7e-5529-a02c-66cc652b4906/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pulsar\_client-3.9.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ffe26901-a10a-575f-ba6c-da3eadf25005/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pulsar\_client-3.9.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7e4ea927-d082-5ac9-8e84-75f2f4578ff8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pulsar\_client-3.9.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/25b82fe8-780a-56d4-afeb-ef3f11ee56e8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pulsar\_client-3.9.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/901b09c9-8af3-5fa6-ac26-5f29ac5a9724/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pulsar\_client-3.9.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/491d6e7c-0b6b-5301-8016-b15729c8f64a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pulsar\_client-3.9.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a8fd3cfd-2976-5481-b2c0-fa32c66f4346/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pulsar\_client-3.9.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5bb36cd1-e299-5f2d-b72e-ad2eef5ef8bc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pulsar\_client-3.9.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [pulsar\_client-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a7120599-0cfc-5531-986c-8d46edfe63c6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pulsar-client@3.9.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pulsar-client/3.9.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pulsar-client/3.9.0