# SBOM for rusty-todo-md 1.11.0 > Multi-language TODO comment extractor written in Rust. The Python package rusty-todo-md 1.11.0 ships 13 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/rusty-todo-md@1.11.0` - PyPI: https://pypi.org/project/rusty-todo-md/1.11.0/ - License: MIT License - Requires Python: \>=3.9 - Homepage: ## SBOMs ### rusty\_todo\_md-1.11.0-py3-none-macosx\_10\_12\_x86\_64.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/53e6c3ab-0f7d-56d7-b632-18ff8e928ee7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-macosx\_11\_0\_arm64.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/92b883e3-6eb5-5a27-8e7f-d1e6f374f533/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/1b3d168f-2505-5822-9615-058283f63c21/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/ba46be29-fff0-53de-87d7-e62aa5d32291/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/ff3b70f7-8d40-52ea-bc14-5b05142ff872/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/89d00ca4-6b93-5ea0-823a-4b310f20b016/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/1609f96a-d195-5b7b-a066-dc5c863f89b7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-musllinux\_1\_2\_aarch64.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/ef792dbf-471d-54e1-a543-2f0eaa046cec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-musllinux\_1\_2\_armv7l.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/f41b2b44-406a-5cfb-a380-1a66f00180f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-musllinux\_1\_2\_i686.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/92b24d87-2c77-5adf-b0f5-7352910574eb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-musllinux\_1\_2\_x86\_64.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/500a9ad8-2b10-5ad7-9f27-c71d0e2f1110/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-win32.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/14c4fed7-f9a9-59db-b68c-7540e0b21471/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### rusty\_todo\_md-1.11.0-py3-none-win\_amd64.whl - [rusty\_todo\_md-1.11.0.dist-info/sboms/rusty-todo-md.cyclonedx.json](https://pypi.sbomify.com/artifact/e1cb00e9-17df-5096-86a9-4d92771c31eb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0183](https://osv.dev/vulnerability/RUSTSEC-2026-0183) | unknown | git2 0.20.4 (crates.io) | 0.21.0 | Potential undefined behavior when calling Remote::list() | | [RUSTSEC-2026-0184](https://osv.dev/vulnerability/RUSTSEC-2026-0184) | unknown | git2 0.20.4 (crates.io) | 0.21.0 | Potential undefined behavior with Signature from a buffer-created BlameHunk | | [RUSTSEC-2026-0418](https://osv.dev/vulnerability/RUSTSEC-2026-0418) | unknown | libz-sys 1.1.30 (crates.io) | 1.1.31 | libz-sys build script leaks environment variables in the build directory | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/rusty-todo-md@1.11.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/rusty-todo-md/1.11.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/rusty-todo-md/1.11.0