# SBOM for pyrxing 0.8.0 > A barcode reader extension module using zxing-cpp and pyo3 The Python package pyrxing 0.8.0 ships 36 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/pyrxing@0.8.0` - PyPI: https://pypi.org/project/pyrxing/0.8.0/ - License: Apache-2.0 - Requires Python: \>=3.11 - Homepage: ## SBOMs ### pyrxing-0.8.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/6f201743-d4a8-52fd-85e7-4f9cf7411331/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/91d1e1c0-1651-5a19-8fbe-4a2ccec2b649/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp311-cp311-manylinux\_2\_39\_aarch64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/2607f107-3cdb-53e8-a32c-bb15e5cadb8d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp311-cp311-manylinux\_2\_39\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/ef4dacc9-3101-545a-bef2-509ccfb4d4be/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2245fdac-654c-5525-b391-0d9d65256c20/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/e31e20bd-ef08-5e97-9024-1b7b67172161/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2a297706-d01d-5bf1-98d9-eaf8dc6fe97a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/dceb8a59-fc4d-55b7-adfd-6db24afc93d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/1329921d-e188-55c3-a6af-84eba739ffee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/a73161e5-f595-5e01-a2a7-132ac8176183/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/864ebad8-08ba-5b51-8c6b-f94345726ac4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp312-cp312-manylinux\_2\_39\_aarch64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/25c68d86-c680-5103-9f7d-54f9c489f5ab/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp312-cp312-manylinux\_2\_39\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/d737c23a-d0d2-591d-853b-c6e921685e41/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6fa21d91-58fd-50ec-a1f6-7a7e8283e645/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/d1ac4125-e86c-53be-a987-2bbc10df2199/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4e6761b6-674f-5546-8d17-cf3243f119ce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/d94d27eb-d18b-5d93-bfff-4ed2814ca61d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/949dc42c-4c19-5c28-9cd8-82a59cf1479f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/6d27adf0-7d68-5c23-b633-b0de6778c2b8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/20931acd-f3fa-58ac-8960-07598c38b8b8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp313-cp313-manylinux\_2\_39\_aarch64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/9d67c585-d7e9-592a-94ec-1bbb2eb2494a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp313-cp313-manylinux\_2\_39\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/8cdd6282-d9e1-57e8-8fe4-d8bb02d696d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/33e1f171-22d2-5db3-b035-b7b2b4eebeb5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/500c12e7-4b0a-5911-bf2f-922c73aa2a0d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f177c348-7eb4-58fb-b824-3710f13a12e0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/0dd91f49-d848-5f27-a8f7-8f1c4f5bd0a1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/8fa3358c-99c9-5ffd-a91e-e2a837d9f5d6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/558d3c01-54f5-5e6c-86f2-cb3b8b16d8f4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/41ab6ac3-913e-5765-8363-cbce0c6be909/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp314-cp314-manylinux\_2\_39\_aarch64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/4b5ef42a-be61-5c82-b88f-6402b3f6f93d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp314-cp314-manylinux\_2\_39\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/d26e008c-3ef4-5c40-b1ff-cd51e20c60b9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/eef255f1-dd2a-5211-a872-36d1a34c35c9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/269d4e0e-7edf-5f9e-8a99-13cfec84b749/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/364d8894-d11c-5bb1-8ac6-0bb732a47629/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/2f111df2-0e74-54e6-9450-fda48e05bd26/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ### pyrxing-0.8.0-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, tanagumo/pyrxing, workflow build.yml). - [pyrxing-0.8.0.dist-info/sboms/pyrxing.cyclonedx.json](https://pypi.sbomify.com/artifact/c6d14f0b-9199-561d-b825-2e750457be6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pyrxing@0.8.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pyrxing/0.8.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyrxing/0.8.0