SBOM for river 0.26.1

Online machine learning in Python

CycloneDX PEP 740 attested 1 known vulnerability

Package information

Requires Python
>=3.11
PyPI
river 0.26.1
Homepage
https://riverml.xyz/
Repository
https://github.com/online-ml/river/

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

river-0.26.1-cp311-abi3-macosx_10_13_universal2.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-abi3-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-abi3-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-abi3-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-abi3-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-abi3-musllinux_1_2_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-abi3-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-abi3-win_amd64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-cp311-macosx_10_13_universal2.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-cp311-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-cp311-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-cp311-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-cp311-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-cp311-musllinux_1_2_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-cp311-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp311-cp311-win_amd64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp312-cp312-macosx_10_13_universal2.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp312-cp312-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp312-cp312-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp312-cp312-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp312-cp312-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp312-cp312-musllinux_1_2_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp312-cp312-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp312-cp312-win_amd64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp313-cp313-macosx_10_13_universal2.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp313-cp313-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp313-cp313-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp313-cp313-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp313-cp313-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp313-cp313-musllinux_1_2_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp313-cp313-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp313-cp313-pyemscripten_2025_0_wasm32.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp313-cp313-win_amd64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp314-cp314-macosx_10_15_universal2.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp314-cp314-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp314-cp314-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp314-cp314-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp314-cp314-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp314-cp314-musllinux_1_2_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp314-cp314-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp314-cp314-pyemscripten_2026_0_wasm32.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp314-cp314-win_amd64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp315-cp315-macosx_10_15_universal2.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp315-cp315-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp315-cp315-manylinux_2_28_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp315-cp315-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp315-cp315-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp315-cp315-musllinux_1_2_ppc64le.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp315-cp315-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

river-0.26.1-cp315-cp315-win_amd64.whl

Attested
Publisher: GitHub Source: online-ml/river Workflow: pypi.yml
Valid
river.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 1 known vulnerability
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2025-0141
Bincode is unmaintained
Unknown bincode 1.3.3
crates.io
—

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]