# SBOM for pypiron 0.0.30 > A fast, reliable, and scalable PyPI server The Python package pypiron 0.0.30 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/pypiron@0.0.30` - PyPI: https://pypi.org/project/pypiron/0.0.30/ - Author: Blackthorn Interstellar - License: MIT - Requires Python: \>=3.11 - Changelog: - Documentation: - Homepage: - Issues: - Repository: ## SBOMs ### pypiron-0.0.30-py3-none-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/316b2254-c6d9-5ada-bcff-71ae1601140c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/dbe7212b-bec3-5cc7-bcf4-81c90937bdbf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/3ceef680-5e4f-56d0-a8b1-031a1cad0935/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/0814aa15-9d03-50a2-af9c-3343f209266a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-manylinux\_2\_17\_i686.manylinux2014\_i686.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/866eea5b-1b4e-537a-9ab0-237e86bc7c5c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/2747fb38-42e0-517f-a06e-9a7f2a385fb0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/afbc28c1-d956-5322-a551-c73145f67c9d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-manylinux\_2\_28\_ppc64le.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/e98b5e52-a91e-5555-9d9c-25e8229f5d9e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-manylinux\_2\_31\_riscv64.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/089b1df4-777c-53df-9c0e-2b9007db20d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/468e0081-3091-53fa-85b3-5d50dfd8b996/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/e780f4a7-7acc-51a5-8820-069681963bda/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/4f1169ca-fb73-5935-9b20-4ffb5bbe7495/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/9ec1afc4-2464-5b70-89fe-5bbafbea0fb2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-win32.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/5c45fd66-f17f-57a7-969e-9b95a6b4ea5d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-win\_amd64.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/f26e2513-a6b2-5048-b57d-7b0c4d582c70/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pypiron-0.0.30-py3-none-win\_arm64.whl PEP 740 attestation verified (GitHub, blackthorn-interstellar/pypiron, workflow ci.yml). - [pypiron-0.0.30.dist-info/sboms/pypiron.cyclonedx.json](https://pypi.sbomify.com/artifact/91c9e1e5-ff03-58ca-989d-c68562ab1137/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0433](https://osv.dev/vulnerability/RUSTSEC-2026-0433) | high (7.5) | pulldown-cmark 0.13.5 (crates.io) | 0.13.6 | Quadratic parsing of nested image wikilinks with \`ENABLE\_WIKILINKS\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pypiron@0.0.30 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pypiron/0.0.30.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pypiron/0.0.30