# SBOM for raptors 0.3.0 > Rust-backed numeric arrays with NumPy-compatible ufuncs The Python package raptors 0.3.0 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/raptors@0.3.0` - PyPI: https://pypi.org/project/raptors/0.3.0/ - Author: Raptors Contributors - Requires Python: \<3.15,\>=3.12 - Documentation: - Homepage: - Issues: - Repository: ## SBOMs ### raptors-0.3.0-cp312-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, eddiethedean/raptors, workflow release.yml). - [raptors-0.3.0.dist-info/sboms/raptors-python.cyclonedx.json](https://pypi.sbomify.com/artifact/d22daf85-64f2-56f6-adb5-794f185bd3b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### raptors-0.3.0-cp312-abi3-macosx\_11\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, eddiethedean/raptors, workflow release.yml). - [raptors-0.3.0.dist-info/sboms/raptors-python.cyclonedx.json](https://pypi.sbomify.com/artifact/3d06da35-cd4c-5435-ba19-f5409013b32c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### raptors-0.3.0-cp312-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, eddiethedean/raptors, workflow release.yml). - [raptors-0.3.0.dist-info/sboms/raptors-python.cyclonedx.json](https://pypi.sbomify.com/artifact/088d415a-ddcd-51b8-9db2-5121dd8ee521/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### raptors-0.3.0-cp312-abi3-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, eddiethedean/raptors, workflow release.yml). - [raptors-0.3.0.dist-info/sboms/raptors-python.cyclonedx.json](https://pypi.sbomify.com/artifact/795b3be6-7801-5128-bb69-40e262b7865f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### raptors-0.3.0-cp312-abi3-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, eddiethedean/raptors, workflow release.yml). - [raptors-0.3.0.dist-info/sboms/raptors-python.cyclonedx.json](https://pypi.sbomify.com/artifact/8f330aa6-f61d-5e1b-b363-035a5b6d9336/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### raptors-0.3.0-cp312-abi3-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, eddiethedean/raptors, workflow release.yml). - [raptors-0.3.0.dist-info/sboms/raptors-python.cyclonedx.json](https://pypi.sbomify.com/artifact/5ee32d64-ff6a-59ed-a9e7-c491efc44057/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### raptors-0.3.0-cp312-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, eddiethedean/raptors, workflow release.yml). - [raptors-0.3.0.dist-info/sboms/raptors-python.cyclonedx.json](https://pypi.sbomify.com/artifact/0fd9e270-a293-50c6-a64b-5ec80154a396/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### raptors-0.3.0-cp312-abi3-win\_arm64.whl PEP 740 attestation verified (GitHub, eddiethedean/raptors, workflow release.yml). - [raptors-0.3.0.dist-info/sboms/raptors-python.cyclonedx.json](https://pypi.sbomify.com/artifact/d38bf774-b54c-5a31-8064-8bd144332b03/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.27.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.27.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/raptors@0.3.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/raptors/0.3.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/raptors/0.3.0