# SBOM for river 0.26.1
> Online machine learning in Python
The Python package river 0.26.1 ships 68 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.
- Package URL (PURL): `pkg:pypi/river@0.26.1`
- PyPI: https://pypi.org/project/river/0.26.1/
- Requires Python: \>=3.11
- Homepage:
- Repository:
## SBOMs
### river-0.26.1-cp311-abi3-macosx\_10\_13\_universal2.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/773fe96b-5157-5ff1-b842-941b2ff54bc5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-abi3-manylinux\_2\_28\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/ea82f0e2-c667-5a6e-8410-e3cffe264aab/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-abi3-manylinux\_2\_28\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/6fb88b09-d050-5ec5-9ee1-e7948fa4c5d8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-abi3-manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/a8726f27-d088-5ac1-a619-47ced56078d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-abi3-musllinux\_1\_2\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/781ad323-9c06-577e-8084-c4092f59cfac/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/58bc6457-6960-591f-88d4-7275c816e24f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-abi3-musllinux\_1\_2\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0365ba83-01ef-5382-a5f4-c4ad8a82e7dd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/66a76a38-33ff-5971-b1b9-54df33d19cea/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-abi3-musllinux\_1\_2\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4de625b5-54e4-58fe-a3ee-0056db8bc270/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/120a3863-ccb3-5e2d-bd33-8efb1355a91e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-abi3-win\_amd64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/e04d68eb-33d3-5bd8-81fe-fc41d9c06870/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-cp311-macosx\_10\_13\_universal2.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/abec8da4-789a-5df0-845f-b28058621f71/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-cp311-manylinux\_2\_28\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/b0783df1-c520-57e0-a5a5-e186613c8044/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-cp311-manylinux\_2\_28\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/aa90579f-e71c-5165-9c7a-ccb7b0d623ef/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/9d0bf068-4c6e-543c-93a5-d1ee88cd6318/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f163018b-5f9e-5bf5-a370-e433fdb409b3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/ad6d19a0-9081-55ea-9b37-60f7c7752865/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-cp311-musllinux\_1\_2\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7a14ac59-1bd4-5875-ac0c-9ec5a508da4d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/4a2ceacd-970a-5bfb-af0e-a333de3bbefe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b01d006f-6e78-5191-8231-b903ba9f7cce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/b7b6a0fd-bf6f-5bb3-bdc6-7a073380f494/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp311-cp311-win\_amd64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/48ef89ca-07a2-587c-9247-40496e8b2070/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp312-cp312-macosx\_10\_13\_universal2.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/ea4b0b9b-619a-5fee-bfc1-cab6f1e40811/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp312-cp312-manylinux\_2\_28\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/6191ad3b-c1ba-5793-89be-4d44b35b0e59/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp312-cp312-manylinux\_2\_28\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/d65d7d5f-80df-59ed-b68b-75d237190658/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/409d41f1-d3da-5334-8ff8-b2e5196237cc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/000088e0-3305-5cce-a8c7-264392f65a8b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/ad0f07bb-acc3-5566-8391-95aef8ace34f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp312-cp312-musllinux\_1\_2\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/39930663-cd1d-59e4-aa5a-1e8d1eeca3ed/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/b504f4d1-6b5f-5a2d-a042-5da807a8f6a7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/598e5977-9dcb-5fe5-9f60-0cda50d255e7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/10c1b2aa-7af8-5cd0-9e7f-4380d40026a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp312-cp312-win\_amd64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/7107d9a6-aa1e-5bbc-b443-003e2174f90f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp313-cp313-macosx\_10\_13\_universal2.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/f3b2fb9c-5d26-5c93-b5b4-8e8f5877e940/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp313-cp313-manylinux\_2\_28\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/ba5e442a-6e38-5c7c-8055-29cea29ec594/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp313-cp313-manylinux\_2\_28\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/0f61477f-b4a1-5eff-86d1-9629cee2d3d0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/101e7a80-f697-5d2f-8bf3-0a926cc3cd8c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/15641eb8-d946-561c-b45b-cf941387a148/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/24b6ca59-b50b-5343-933b-7b640b38535c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp313-cp313-musllinux\_1\_2\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/052a8fab-9756-5da2-954e-b682215af97e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/ee1c952f-19c7-5df1-bfa9-be2ae47f7ba6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/016f7505-8374-5ebd-8c29-2a09a00f1af7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/69dc1e22-982d-5d79-86f8-f7b973e884b3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp313-cp313-pyemscripten\_2025\_0\_wasm32.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/0f9d61a2-10c7-5699-b287-61d4ee223c32/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp313-cp313-win\_amd64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/e35d743c-ff81-5658-b865-6e711a7e3c5d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp314-cp314-macosx\_10\_15\_universal2.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/58deb599-0225-53a1-9fc2-27d9e4d6c8dd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp314-cp314-manylinux\_2\_28\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/a3d43f3f-d3cd-5e6b-bc8b-e950ab9f3444/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp314-cp314-manylinux\_2\_28\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/0e283f18-e03c-5dda-a99b-3810dc368dd8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/50c8e1c3-9df3-5a01-8c7b-215ec11c08a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e124c79e-0ce5-5291-90a5-cf5f5cfd07cd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/3c121fb0-87e0-59fd-b7b3-aa4317003170/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp314-cp314-musllinux\_1\_2\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/da457544-edb8-52bb-acd1-ce8a06963020/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/180ff541-c1ef-5cac-bec4-93c5edbeb695/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2b59fdfe-424d-5408-ac09-cbd7b7502829/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/29c910c8-1a5e-57d0-860c-5fbf380a5c59/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp314-cp314-pyemscripten\_2026\_0\_wasm32.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/fc2a417d-d051-5651-b5ba-9f2b1e8459d8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp314-cp314-win\_amd64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/388db853-7fce-59dc-8494-f46f6af6b91d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp315-cp315-macosx\_10\_15\_universal2.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/942164ba-513c-579e-abb1-f47e1f9b2861/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp315-cp315-manylinux\_2\_28\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/b2b053a1-aff0-530c-bfbc-fc6108b38300/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp315-cp315-manylinux\_2\_28\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/e1f58158-02d3-5329-b92b-b867490c31e6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp315-cp315-manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/094fb459-edeb-529f-9080-a2a4c2ef05a1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp315-cp315-musllinux\_1\_2\_aarch64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/08123225-9cdb-5ffd-80a2-2c132768d153/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/b27824bf-5fc3-5ba1-bfc3-98f84ac8d5f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp315-cp315-musllinux\_1\_2\_ppc64le.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/49d62a80-e47e-5891-9079-d28686833f3e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/d209eafc-0683-5b88-90fe-2f2b6a70aa2c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp315-cp315-musllinux\_1\_2\_x86\_64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/635f3b29-e5df-544c-b9c6-a04e95c3cfff/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/dfe757c3-2e92-5a06-a462-1e0175a233e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
### river-0.26.1-cp315-cp315-win\_amd64.whl
PEP 740 attestation verified (GitHub, online-ml/river, workflow pypi.yml).
- [river-0.26.1.dist-info/sboms/river.cyclonedx.json](https://pypi.sbomify.com/artifact/bf7bd133-cef8-558a-bb54-fa7e3dda985d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability
## Known vulnerabilities
Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.
| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2025-0141](https://osv.dev/vulnerability/RUSTSEC-2025-0141) | unknown | bincode 1.3.3 (crates.io) | none listed | Bincode is unmaintained |
## Fetch it over TEA
This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:
```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/river@0.26.1
```
Machine-readable copy of this page: https://pypi.sbomify.com/package/river/0.26.1.json
---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/river/0.26.1