# SBOM for sosap 0.4.3

> Phonetisaurus G2P inference, pure-Rust implementation with Python bindings

The Python package sosap 0.4.3 ships 24 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/sosap@0.4.3`
- PyPI: https://pypi.org/project/sosap/0.4.3/
- License: MIT
- Requires Python: \>=3.11
- Repository: <https://github.com/seanghay/sosap>

## SBOMs

### sosap-0.4.3-cp311-cp311-macosx\_11\_0\_arm64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/93bb2c1f-0173-523d-9fc7-06fac7bd56a4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/cf88dceb-9562-56f3-853a-627bc16268b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/9320fd62-0153-57b9-88f2-df49d8652614/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp311-cp311-musllinux\_1\_2\_aarch64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/efd9f1bc-5e90-5920-b8eb-c3d9134243f7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/802c2c22-4cb9-5c95-93c0-eebfb8ef128d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp311-cp311-win\_amd64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/30136980-f176-5ba3-9c5a-81c355c1f420/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp312-cp312-macosx\_11\_0\_arm64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/7e035bdc-57cf-56c9-8573-04f44224db3d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/a2a6892f-aeca-513c-8609-6d7dde82f9b9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/1d2ce156-8b26-5d1f-b9cc-0f0bf29ae997/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp312-cp312-musllinux\_1\_2\_aarch64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/198c544e-cf18-5ddd-b0b3-2bf2fa336710/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/98bd03ef-3324-53cb-a8ab-990472b4e653/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp312-cp312-win\_amd64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/7a07ae30-f012-5482-a714-bfd1edc50160/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp313-cp313-macosx\_11\_0\_arm64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/af7a327b-9733-52cd-9f42-7095e1f0d153/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/d3146243-3550-521f-9a20-229209d45dd6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/b337c420-46cd-56d9-a4a2-8b8a0f89458c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp313-cp313-musllinux\_1\_2\_aarch64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/16010599-ac44-573d-ae13-7aaed83cdf7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/415bf7b3-05ad-5d49-b100-76ee2da29be5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp313-cp313-win\_amd64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/895a06a5-e36f-5874-9f89-a672ee450bbb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp314-cp314-macosx\_11\_0\_arm64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/d9b9567b-5b1c-5850-8a70-e9e520fa2ed7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/6afb2f7e-4cf6-520a-bab9-ba641ae4b8b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/2688c772-9407-5dec-913e-e9a9a0a1673a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp314-cp314-musllinux\_1\_2\_aarch64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/9075f19a-6b11-5c7c-96c6-9c7f49a7f741/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/cbcbb911-c2e6-5660-bc69-e7c81bd3429b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### sosap-0.4.3-cp314-cp314-win\_amd64.whl

- [sosap-0.4.3.dist-info/sboms/sosap.cyclonedx.json](https://pypi.sbomify.com/artifact/94647539-a9ae-5890-a555-c50c19772747/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2026-0190](https://osv.dev/vulnerability/RUSTSEC-2026-0190) | unknown | anyhow 1.0.102 (crates.io) | 1.0.103 | Unsoundness in \`Error::downcast\_mut()\` |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/sosap@0.4.3
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/sosap/0.4.3.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/sosap/0.4.3