# SBOM for signified 0.7.3

> A fast, fully-typed Python library for reactive programming.

The Python package signified 0.7.3 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/signified@0.7.3`
- PyPI: https://pypi.org/project/signified/0.7.3/
- Requires Python: \>=3.12
- Changelog: <https://dougmercer.github.io/signified/latest/changes/>
- Documentation: <https://dougmercer.github.io/signified>
- Homepage: <https://github.com/dougmercer/signified.git>
- Issues: <https://github.com/dougmercer/signified/issues>
- Repository: <https://github.com/dougmercer/signified.git>

## SBOMs

### signified-0.7.3-cp312-abi3-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, dougmercer/signified, workflow publish.yml).

- [signified-0.7.3.dist-info/sboms/signified-core.cyclonedx.json](https://pypi.sbomify.com/artifact/bc9a1883-9756-54a9-88ee-76574cfb88f4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signified-0.7.3-cp312-abi3-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, dougmercer/signified, workflow publish.yml).

- [signified-0.7.3.dist-info/sboms/signified-core.cyclonedx.json](https://pypi.sbomify.com/artifact/fdaeaad8-c943-5ddb-9375-0d3bf1ef7f2d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signified-0.7.3-cp312-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

PEP 740 attestation verified (GitHub, dougmercer/signified, workflow publish.yml).

- [signified-0.7.3.dist-info/sboms/signified-core.cyclonedx.json](https://pypi.sbomify.com/artifact/72cfd5f6-c4c0-59dc-90fe-8a75fb09080d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signified-0.7.3-cp312-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

PEP 740 attestation verified (GitHub, dougmercer/signified, workflow publish.yml).

- [signified-0.7.3.dist-info/sboms/signified-core.cyclonedx.json](https://pypi.sbomify.com/artifact/3055de75-9a0c-5a24-b354-831ab0681c79/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signified-0.7.3-cp312-abi3-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, dougmercer/signified, workflow publish.yml).

- [signified-0.7.3.dist-info/sboms/signified-core.cyclonedx.json](https://pypi.sbomify.com/artifact/2c43ada9-60e2-5d4b-8369-43fa17d1f7fe/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signified-0.7.3-cp312-abi3-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, dougmercer/signified, workflow publish.yml).

- [signified-0.7.3.dist-info/sboms/signified-core.cyclonedx.json](https://pypi.sbomify.com/artifact/5c81606e-685f-5d27-ac92-6f047679fa08/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signified-0.7.3-cp312-abi3-pyemscripten\_2026\_0\_wasm32.whl

PEP 740 attestation verified (GitHub, dougmercer/signified, workflow publish.yml).

- [signified-0.7.3.dist-info/sboms/signified-core.cyclonedx.json](https://pypi.sbomify.com/artifact/76788f11-d891-5c92-95a0-62dc768d7621/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signified-0.7.3-cp312-abi3-win\_amd64.whl

PEP 740 attestation verified (GitHub, dougmercer/signified, workflow publish.yml).

- [signified-0.7.3.dist-info/sboms/signified-core.cyclonedx.json](https://pypi.sbomify.com/artifact/dcb472e6-b490-5f19-9132-f43ab426a14d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/signified@0.7.3
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/signified/0.7.3.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/signified/0.7.3