# SBOM for space-graph 2.0.2 > Python SPACE: sparse partial correlation estimation The Python package space-graph 2.0.2 ships 29 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/space-graph@2.0.2` - PyPI: https://pypi.org/project/space-graph/2.0.2/ - License: GPL-3.0-or-later - Requires Python: \>=3.10 ## SBOMs ### space\_graph-2.0.2-cp310-cp310-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/82b55fff-4e21-5d23-b7df-9027976259ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/4505971f-f47d-5d8a-a6f7-081e4ab567c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/0f5f4714-5658-56bd-bdf6-5d6b69c8aa04/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/f37f9d82-3735-5abd-b312-a646e0c892c8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp311-cp311-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/58270d94-fc7e-5f90-9ea5-8bf24c5818d1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/f361a9f0-4efe-52c1-b0e0-cb24ee899bed/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/17472d5c-e7b6-535f-9be1-ec84e572d96b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/39912dfa-a40e-5092-9a87-a5d40a95dc4f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/7b102531-095b-5700-bc81-602a9441ae89/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/eb7ad967-de2d-545c-a50d-5b957e653e37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/6e0a6b3f-7bc4-54c8-a763-ed3330bf3c6f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/133f72f8-b13c-5eeb-95f4-fe8866047366/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/45b4cd71-eb9a-5a2e-9f47-9a5daad681a7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/33ba9e51-8f81-549d-8c29-049082af6d7a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/b5660a1a-9e40-51a4-86c1-ec97149ce29d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/67fdb308-756b-5d18-aaa5-1b6a836b1dde/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/e3a4f386-9a45-5ac0-8e06-4e89a97198c9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/1f11fc34-a535-5ef7-883e-5b09bdeb81ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/bdb25ebd-2c8f-5209-85c1-cbd1882f133a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp313-cp313t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/818b10fa-ceeb-5a81-a5db-0e0363518131/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp314-cp314-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/e2abd22e-0472-5078-a688-1720c1abd3d5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/feeaf558-dcf3-5b5d-8f67-542762c93756/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/aabccf00-cedf-5fd4-9f98-52b3343410e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/4cced4a5-9a2e-549e-922a-366ca67aa3b2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/0b3cd1a0-6976-53f1-b1b5-26fed499a1ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/21a3ff7f-f9b1-58f2-894d-dd90c7f4d09e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/b20003d2-e189-5a9b-b57d-eb61af13fe75/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/b318934c-b21d-5c49-9517-80904bbfec71/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### space\_graph-2.0.2-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, shahrozeabbas/space-graph, workflow wheels.yml). - [space\_graph-2.0.2.dist-info/sboms/space\_graph\_rust.cyclonedx.json](https://pypi.sbomify.com/artifact/e91d4776-5165-5346-a18e-8d8f224929d8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/space-graph@2.0.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/space-graph/2.0.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/space-graph/2.0.2