# SBOM for pyrevealed 0.5.3 > Revealed preference analysis at scale — rationality scores, efficiency indices, and utility recovery. Rust engine, Python interface. The Python package pyrevealed 0.5.3 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/pyrevealed@0.5.3` - PyPI: https://pypi.org/project/pyrevealed/0.5.3/ - Author: PyRevealed Contributors - License: MIT - Requires Python: \>=3.10 - Documentation: - Homepage: - Repository: ## SBOMs ### pyrevealed-0.5.3-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/0cad772e-27ca-518f-8ce0-e6ab30aa9d9f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp310-cp310-macosx\_11\_0\_arm64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/3a167e9c-8505-56c9-89f6-84054c868f74/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp310-cp310-manylinux\_2\_28\_x86\_64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/327bc032-eb4e-5379-87f5-ba34d41ffeeb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp310-cp310-win\_amd64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/bbfdc423-79d0-5ff8-b405-ce981512a948/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/06c9d544-3de2-5a08-9fb0-9b64153746b1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp311-cp311-macosx\_11\_0\_arm64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/35131b05-0f5c-51ca-a052-d2e79d41b2b7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp311-cp311-manylinux\_2\_28\_x86\_64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/606c5895-8a49-541b-a7eb-ec54e7eac34e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp311-cp311-win\_amd64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/0eec95bd-e09d-50dd-8146-7ef18cbeb709/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/ce3c5175-999a-56be-9e8c-3f31b59dbff8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp312-cp312-macosx\_11\_0\_arm64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/8bb87b3c-fac9-5c1b-9ce6-fd203f0733c9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp312-cp312-manylinux\_2\_28\_x86\_64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/3b85dc7b-9d88-591e-9109-ed6618faded4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp312-cp312-win\_amd64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/7a857ba6-de81-5ead-8e14-656f2e47e8d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/394c0fd1-15ac-51c8-9b37-3d6b1feef53c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp313-cp313-macosx\_11\_0\_arm64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/97f228ac-6813-56b7-be09-7f9b9a2b20b1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp313-cp313-manylinux\_2\_28\_x86\_64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/18c68e33-107a-5e07-865a-f5d04996f67d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ### pyrevealed-0.5.3-cp313-cp313-win\_amd64.whl - [pyrevealed-0.5.3.dist-info/sboms/rpt-python.cyclonedx.json](https://pypi.sbomify.com/artifact/37a4d307-985f-55d1-979a-734c919a2183/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 4 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.22.6 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.22.6 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.22.6 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` | | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pyrevealed@0.5.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pyrevealed/0.5.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyrevealed/0.5.3