# SBOM for rust-py-timer 0.1.1

The Python package rust-py-timer 0.1.1 ships 19 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/rust-py-timer@0.1.1`
- PyPI: https://pypi.org/project/rust-py-timer/0.1.1/
- Requires Python: \>=3.8

## SBOMs

### rust\_py\_timer-0.1.1-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/3c6339b4-8ee2-5227-a353-8826044a3584/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/5c16a34b-a782-5281-81b7-a77159a7bcd4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/74c408fb-01d8-5af3-9fe6-60591a5e3dc9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/be41ac53-a608-5fc1-8d15-69120c23c748/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/05db4f42-725a-514f-af0b-7caf35215120/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/db77a296-1823-5827-9743-28fa663b3684/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/c1b87fb7-6364-5425-893f-9fadd08d2cc9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/e8bb9bbe-e092-5c8b-93d5-a9d647421b49/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp313-cp313t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/0518cbbc-4ef6-5fe8-a668-037e504209dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/fac15f8e-abc8-5a9b-9389-7aafd0d96b62/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/df5b44b7-cc5d-5efc-ad3c-ec6a13f78b3b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/c8cfd740-8d08-5171-b510-e79b4e89f3c2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp38-cp38-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/5d043544-a9f9-58df-9a53-c7dbb9bc0db8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/ba078a76-2a47-5195-83f2-aea879677a59/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/2b09289e-6344-5bb6-9e14-ded170a9620a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-pp310-pypy310\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/0e47345e-8fe1-5cae-83d5-19fd71cc7de6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/aa5cf08a-8dcf-56fd-8ea4-b971391f9578/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/b63de00f-1fa9-5c9b-8f4a-4600115e858f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### rust\_py\_timer-0.1.1-pp39-pypy39\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, sacovo/lerobot\_ros, workflow rust\_py\_timer.yml).

- [rust\_py\_timer-0.1.1.dist-info/sboms/rust-py-timer.cyclonedx.json](https://pypi.sbomify.com/artifact/e17edae5-ccca-506d-a58f-76ac035f168d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.25.1 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.25.1 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/rust-py-timer@0.1.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/rust-py-timer/0.1.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/rust-py-timer/0.1.1