# SBOM for rigour 2.6.2 > Financial crime domain data validation and normalization library. The Python package rigour 2.6.2 ships 35 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/rigour@2.6.2` - PyPI: https://pypi.org/project/rigour/2.6.2/ - Requires Python: \>=3.10 - Documentation: - Issues: - Repository: ## SBOMs ### rigour-2.6.2-cp310-cp310-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/dc1783f5-d2f6-59a5-9f1a-7799367671ba/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp310-cp310-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/de1966bb-b226-56ff-9ee8-a6dafb24930b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp310-cp310-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/13e95842-f179-5952-ba61-abb83798c472/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp310-cp310-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/fff3c04f-74fc-562b-8a51-08bc13d46c75/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/86381a08-1908-5ac2-bad4-584ea4b29bb0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/4ddbdec4-1c3f-55c4-85c6-41404db07ca1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/9e0b97b7-c14f-5703-ab38-0756db13e43a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp311-cp311-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/fa0c2f58-893a-5b41-ac36-91ddf955fff6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/be93b707-0f96-5dc0-b0e1-2fb36b2ccb0b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp311-cp311-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/74f56220-8e36-5756-a500-74133ed2d073/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/fb2f7e6b-8bc3-5f00-8399-20bc3be6cc78/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/98fd5e17-a9c2-5bfa-af26-6f87107d4a0e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/28b1de94-57ed-5f0d-8f98-860773ec091a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/ef686c17-8c00-54e6-a43a-9f89d2f9ed4c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/330e8ba2-dfa9-573d-a8f6-f11d4ac72062/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/d7fca2ba-5a74-5706-8f86-252750909a1b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp312-cp312-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/8657d2d5-c9ea-53ce-929d-3658d097933b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/5989e6c3-2cc6-5c27-baee-f85a42f32f8a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/3bacfdd6-f2a3-53f0-a414-c4338007715d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/d237564d-80af-55b1-a8c1-ecd10e1a82ef/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/c42b33f0-5ee6-565f-9a4b-bb304b95f3af/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/94fd0207-3f18-5ee5-97e5-ab98fc36073c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/0a1e3f46-333c-5bd1-9651-89ec06f137d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp313-cp313-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/963e8174-5d82-5733-8636-8a6e772cac2e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/d7ddc5d7-3fd0-5a56-ae01-a66cc0dc4f21/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/0a4e47f6-b7b7-5022-980e-f39dc539147f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/e39df26a-068c-5539-a82c-da8b80a21987/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/74b45eb3-6377-5502-b3b7-684bbac7bf8a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp314-cp314-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/b147754b-db2f-542b-a720-852ac7bc078d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/7abf528b-be53-51d5-8ee1-59c6c20a733d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp314-cp314-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/41499097-b3c7-56cc-9705-1eeb3c0882e2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp314-cp314-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/0004ba7f-ca3b-5aa4-8392-623d44a81388/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/5b465d8a-4645-51d1-bb34-d1bfba5e56a1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/393d9bf3-317a-52ab-a303-3ca116d7d956/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rigour-2.6.2-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, opensanctions/rigour, workflow build.yml). - [rigour-2.6.2.dist-info/sboms/rigour-core.cyclonedx.json](https://pypi.sbomify.com/artifact/63d9bbdd-696a-5239-bc19-43e60fb69cee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/rigour@2.6.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/rigour/2.6.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/rigour/2.6.2