SBOM for python-alpm 0.6.0

Python bindings for the Rust-based ALPM project

Package information

Requires Python
>=3.10
PyPI
python-alpm 0.6.0
Changelog
https://alpm.archlinux.page/python-alpm/CHANGELOG.html
Documentation
https://alpm.archlinux.page/pdoc/
Homepage
https://alpm.archlinux.page/python-alpm/
Issues
https://gitlab.archlinux.org/archlinux/alpm/alpm/-/work_items
Repository
https://gitlab.archlinux.org/archlinux/alpm/alpm

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

python_alpm-0.6.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Valid
python-alpm.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

python_alpm-0.6.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Valid
python-alpm.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

python_alpm-0.6.0-cp310-abi3-manylinux_2_31_riscv64.whl

Valid
python-alpm.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0385
Non-constant-time mask generation and `u128` comparisons
Unknown ctutils 0.4.3
crates.io
0.4.4

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]