# SBOM for schematodes 1.0.1 > A tool for expressing permutation symmetries in sets of tuples. The Python package schematodes 1.0.1 ships 40 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/schematodes@1.0.1` - PyPI: https://pypi.org/project/schematodes/1.0.1/ - Requires Python: \>=3.7 ## SBOMs ### schematodes-1.0.1-cp310-cp310-macosx\_10\_12\_x86\_64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/f25f2928-d71a-55ec-8cc5-ad69d8bb7669/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp310-cp310-macosx\_11\_0\_arm64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/d4f17ef1-2b40-532d-a829-88358e38eafb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/af104f4d-0ddb-58bc-a272-9101888d0109/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp310-cp310-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/6ce83d0a-232c-5878-b254-db8aafb86a4b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp310-cp310-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/48a87451-9cf4-5f22-b193-739e1a278b1e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp310-cp310-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/16f518ad-3441-55d9-aa81-fb394303f894/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/f5d15ab6-b05a-5be8-bad3-853de25f0a84/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp310-cp310-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/4b6667a9-5964-574e-957d-2eb8e401dede/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp310-cp310-win32.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/85eb93d7-9a7c-5208-bd22-bb1feeb86d7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp310-cp310-win\_amd64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/7b2f1518-af7c-5d06-a52a-eee32041f328/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/21fc832e-2412-5ff7-9ac7-aad4e5f262e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-macosx\_11\_0\_arm64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/da39915b-a2ac-5f29-8344-6b16497dbde9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/c2cb3cf3-df6c-5a08-84ab-6f1d0fcbb466/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/b7628b04-5113-5a37-9240-57bc66798288/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/160a159f-f8da-5da1-a408-2bf6a9cf1d4c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/9c3880a0-dd5c-5ad6-9ff1-1ca23b88da37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/35242013-659c-515b-88e6-20ea1101cfd4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/b61028ff-a5fa-5f3d-bd86-f9c591dc6dc1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-win32.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/ddcdf018-9748-5c54-b3bb-e1d140e47197/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp311-cp311-win\_amd64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/3be34455-08b9-58fa-9951-934395c5f91f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/e5d9413c-1303-58ae-9e7a-195f32df3e3f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-macosx\_11\_0\_arm64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/7e0d9048-d37d-552c-8308-d81f6f0ec061/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/5c87c601-95c2-561b-aed7-19411e761aa3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/1ce0c842-369d-5cac-92b2-ff85efbeca1e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/619b12c2-1caf-5c9c-bc2c-e857949e44e3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/b94e2487-cd70-5ea0-942f-1526c1b74adc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/1da6f728-e2cb-58b9-a282-84ebc0135de1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/304ef16e-7e87-502f-b2e3-279752c72b67/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-win32.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/74321702-1fac-595c-8706-a90b37540867/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp312-cp312-win\_amd64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/5bd3289d-7e3e-5706-a09c-c6bcd059772a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/d5506658-88f0-5909-b45a-9dffba13f51d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-macosx\_11\_0\_arm64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/13d08172-ba87-5b09-af74-ec7413871beb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/1c274155-1d48-5943-b4e6-ac676c32cf05/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/b6c6cabe-395e-5a9c-ad8a-1036ecd4e345/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/84214dd2-0af7-56f4-8e4d-b283846fc6ee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/09cf2817-31bc-5811-83ff-50852f2534f7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/e2c6a7b7-fa77-5789-8102-9b282654b827/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/dd12e796-287d-58e1-b0dd-2d389b15eef4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-win32.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/7819003e-273a-539a-bdb9-f4adedca980c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ### schematodes-1.0.1-cp313-cp313-win\_amd64.whl - [schematodes-1.0.1.dist-info/sboms/schematodes.cyclonedx.json](https://pypi.sbomify.com/artifact/5337971f-94fb-58b0-a6fd-8f9a401ad362/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [GHSA-36hh-v3qg-5jq4](https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4) | high (8.7) | pyo3 0.22.6 (crates.io) | 0.29.0 | PyO3 has an Out-of-bounds Read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.22.6 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | | [RUSTSEC-2025-0020](https://osv.dev/vulnerability/RUSTSEC-2025-0020) | low (2.9) | pyo3 0.22.6 (crates.io) | 0.24.1 | Risk of buffer overflow in \`PyString::from\_object\` | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/schematodes@1.0.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/schematodes/1.0.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/schematodes/1.0.1