# SBOM for rormula 0.1.14 > Formula parser and evaluator for Wilkinson notation The Python package rormula 0.1.14 ships 38 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/rormula@0.1.14` - PyPI: https://pypi.org/project/rormula/0.1.14/ - License: BSD-3-Clause - Requires Python: \>=3.10 - homepage: - repository: ## SBOMs ### rormula-0.1.14-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/82137c3d-c73d-5a48-b97d-27c121cab185/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp310-cp310-macosx\_11\_0\_arm64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/762d6487-bcc8-5823-86e7-1fbc1846def9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/4cb734c6-4455-594e-a211-b031f177908c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/7362ab61-98a5-5015-9767-5aac9abf1fcf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp310-cp310-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/1706022b-1d4f-56d1-9aa1-ec659b98b17d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp310-cp310-win32.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/81bf5bcf-5693-5941-8508-cc09af529180/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp310-cp310-win\_amd64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/e5aad966-95bc-50db-a5a5-c4d02c33adeb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/c1e1be42-c8f3-57b6-9ec4-a1364ef658de/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp311-cp311-macosx\_11\_0\_arm64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/6cb82142-e59e-5596-b484-5a8249e26b4f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/43d6f6c0-1f36-57db-86af-c50ee09c691d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/1a09afff-99ae-517f-8a8a-f20cd44ae859/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp311-cp311-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/e6ceea54-c817-5ee1-97c1-4849d67f1082/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp311-cp311-win\_amd64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/ea2e557f-2028-57dc-a599-c45f715e8e79/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/95326289-53ed-56de-9f14-017a85119cde/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp312-cp312-macosx\_11\_0\_arm64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/e5924df8-4679-5d75-893c-7547cbba6766/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/18cafb5b-82ed-53a7-ae5b-43c7e3aec135/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/c704164b-2b1c-5567-8836-3bbbca85ac06/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp312-cp312-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/23b27c43-9e53-5073-8653-1ab744749017/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp312-cp312-win\_amd64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/7c139015-cb3f-57c9-ba00-dbf397e9f4ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/159e6069-2d82-52a7-8957-c09e49b59fd8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp313-cp313-macosx\_11\_0\_arm64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/f0d15f7d-8a13-5be6-bb6b-a203f30ee5bc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/11bfdd82-56ae-5c48-8157-512d5df8b1a6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/fd55893a-76f9-5173-872f-e6ed42bf9216/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp313-cp313-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/b2aed8c0-d530-5a40-b8f5-f71cd9b8c567/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp313-cp313-win\_amd64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/6ae17f65-2603-56d6-929e-62d61756ea4e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp313-cp313t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/9ee22ef5-1b1c-5e4b-bc91-97c652dde6b4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/e495c193-5eb8-59dd-8abd-3600326d190d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp314-cp314-macosx\_11\_0\_arm64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/de17b48f-4d3a-5b34-b230-c61f64bb1735/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/9171d40f-9d41-5644-9eb8-3960386edeca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/28c34036-300f-5d73-873e-64dae5b5bfb0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp314-cp314-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/8d054ec9-c517-54c3-be92-d12cb9395369/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp314-cp314-win\_amd64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/0b93b36b-acb4-5e64-a74f-7c85a64ec08f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/0ccbbdae-72a7-5fb1-b830-d3d8d7142c04/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/b24188d1-e632-5a2d-887f-60f61bed0989/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-cp315-cp315-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/6d0842ca-842a-57dc-a2d7-0bd2d27f345a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/8cbe9153-2253-5b70-bc8e-4eedbc560966/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/26d0ca8a-0ef2-52b1-a14e-cf90e809f51c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### rormula-0.1.14-pp311-pypy311\_pp73-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [rormula-0.1.14.dist-info/sboms/rormula.cyclonedx.json](https://pypi.sbomify.com/artifact/2ea91f20-ed64-516a-9dee-7eb1e719bc90/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/rormula@0.1.14 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/rormula/0.1.14.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/rormula/0.1.14