# SBOM for pymab 2.0.1

> Reliable, statistically rigorous multi-armed bandit experiments.

The Python package pymab 2.0.1 ships 20 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pymab@2.0.1`
- PyPI: https://pypi.org/project/pymab/2.0.1/
- Requires Python: \>=3.11
- Changelog: <https://github.com/danielaLopes/pymab/blob/main/CHANGELOG.md>
- Homepage: <https://github.com/danielaLopes/pymab>
- Issues: <https://github.com/danielaLopes/pymab/issues>
- Repository: <https://github.com/danielaLopes/pymab>
- Rust: <https://crates.io/crates/pymab>

## SBOMs

### pymab-2.0.1-cp311-cp311-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e7154ff5-ad21-5a1f-b7e0-6b0a1a12df3b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp311-cp311-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/3b946e0f-1804-5646-a94d-5c5c9868bf79/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp311-cp311-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/04477fb3-a0dc-533f-ac4e-5b10967a8e99/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f8cf3379-ba91-5091-828e-12f073d870a8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp311-cp311-win\_amd64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/2a716de7-6a92-53eb-be2f-3177c239e0ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp312-cp312-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/a06e18b8-fc01-5fb2-8dd2-2ecee65ff66d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp312-cp312-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f95931fa-5cc7-510b-866c-4d8a1ba9b8c3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp312-cp312-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/bfa319d1-b45d-51c9-bbd0-b249f40c7b80/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/c055bc71-245c-5ee6-9193-2a4eb0281b51/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp312-cp312-win\_amd64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/8ac3660c-9d69-5ac2-a788-33a63a4db853/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp313-cp313-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/35e07ff7-5928-5b35-8b79-a3c483a17e43/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp313-cp313-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/79b63db8-a4eb-5515-b999-44960239e8fd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp313-cp313-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/6f74a2bf-6972-5ce8-86d6-e537bae16935/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/dac50cf4-9cb8-5871-bee2-fec1480e981b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp313-cp313-win\_amd64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/9b78c1e8-46c4-592e-bea4-f5ce80b724c2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp314-cp314-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f02a2123-ffad-58bf-9bdb-870fac368ffc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp314-cp314-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/6d4f77af-a924-51a3-a518-94fbe3278de0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp314-cp314-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/0b790737-3ad8-5112-b2cf-17bdc611c5f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/55090c89-83a4-5501-9ed3-4b4bee4c0d6a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### pymab-2.0.1-cp314-cp314-win\_amd64.whl

PEP 740 attestation verified (GitHub, danielaLopes/pymab, workflow release.yml).

- [pymab-2.0.1.dist-info/sboms/pymab-python.cyclonedx.json](https://pypi.sbomify.com/artifact/bb7f0005-5418-59fa-b99d-e3854a701f00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pymab@2.0.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pymab/2.0.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pymab/2.0.1