# SBOM for repo-mapper-rs 0.5.1 The Python package repo-mapper-rs 0.5.1 ships 15 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/repo-mapper-rs@0.5.1` - PyPI: https://pypi.org/project/repo-mapper-rs/0.5.1/ - Requires Python: \>=3.10 ## SBOMs ### repo\_mapper\_rs-0.5.1-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ae2ef27c-b01c-50f5-a5e3-7f299a785525/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp311-cp311-manylinux\_2\_34\_x86\_64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2b4c5180-dd11-5e41-b808-c69897d733e4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d875f907-2187-53ed-ad1a-4c36e4dd909d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c28b4625-3283-57be-b773-56c73835c2bf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp312-cp312-manylinux\_2\_34\_x86\_64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/476306e3-71b8-522b-ae7a-dc4ac2c63552/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ccd04703-6e49-55e8-a044-ad17ffd09724/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e42640ce-3757-54d0-84ea-8743f3ee907d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp313-cp313-manylinux\_2\_34\_x86\_64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/772f89bb-7e04-5407-9e9b-5816d944da92/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/fa498e1f-d8be-5b6b-8457-e2bb1c6a799c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/eb43d34e-1be0-5846-96d3-3b380dca8744/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp314-cp314-manylinux\_2\_34\_x86\_64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/713420d0-ef55-5e0e-8d8e-ff52517d7e7e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/85ec1718-5124-5407-a881-67360bd2eadb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp315-cp315-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/aa5f9750-b8a2-59dc-91b6-e37c1d8c4e93/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp315-cp315-manylinux\_2\_34\_x86\_64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/3a796847-1800-5417-8baf-19b1fa0fef72/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### repo\_mapper\_rs-0.5.1-cp315-cp315-win\_amd64.whl PEP 740 attestation verified (GitHub, second-ed/repo-mapper-rs, workflow publish.yaml). - [repo\_mapper\_rs-0.5.1.dist-info/sboms/repo-mapper-rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c53059db-f456-5c51-afe5-cc641719ff5e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/repo-mapper-rs@0.5.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/repo-mapper-rs/0.5.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/repo-mapper-rs/0.5.1