# SBOM for spatio 0.3.0

> High-performance, embedded spatio-temporal database

The Python package spatio 0.3.0 ships 24 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/spatio@0.3.0`
- PyPI: https://pypi.org/project/spatio/0.3.0/
- Author: Petro Kvartsianyi
- Requires Python: \>=3.9
- Changelog: <https://github.com/pkvartsianyi/spatio/releases>
- Crates.io: <https://crates.io/crates/spatio>
- Documentation: <https://github.com/pkvartsianyi/spatio#readme>
- Homepage: <https://github.com/pkvartsianyi/spatio>
- Issues: <https://github.com/pkvartsianyi/spatio/issues>
- PyPI: <https://pypi.org/project/spatio>
- Repository: <https://github.com/pkvartsianyi/spatio>

## SBOMs

### spatio-0.3.0-cp310-cp310-macosx\_11\_0\_arm64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/827a72c3-4629-5e81-b879-68ea28a19bfa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp310-cp310-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/81c1e37f-73e8-5e3e-8b22-628a69c513b0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/15f0990d-a365-58f8-b920-303d73f56217/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp310-cp310-win\_amd64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/05d1493f-34a0-506a-8fe5-56da05813ebf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp311-cp311-macosx\_11\_0\_arm64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ccfc9701-473b-5108-81e1-62bc7884cf0b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/856f9f2b-094d-566c-9b4e-b1bbd4b0efc5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/2d2765e1-f5e2-5489-a1e1-0a15f0a874e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp311-cp311-win\_amd64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/39b21cb6-d9eb-53f9-b9fc-c78032ea104b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp312-cp312-macosx\_11\_0\_arm64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ed04bda5-be81-5e59-af0b-9536eecbe503/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8879ccd2-ad82-56a6-9716-89e727d18710/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/92d2c539-6bc2-5155-93cc-a7d4f4fcba61/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp312-cp312-win\_amd64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/c5f37f92-1614-5048-850b-d2a27a58583d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp313-cp313-macosx\_11\_0\_arm64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4fe8dd8d-4951-5acc-bfbe-1aab2aeb8ce0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/5b5bf050-d962-5d8c-8d9c-266d3b79e86a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/dd01e705-d722-53a9-a39d-006bb50e320e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp313-cp313-win\_amd64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/a1ee452d-ff2f-5599-9d7a-a6495ab876ce/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp314-cp314-macosx\_11\_0\_arm64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/385a855c-9159-5ef9-b599-45dd824186e3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/278d5555-1b43-5664-b59d-cb096744ee40/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/610a988e-e74c-5dfd-9561-9294e25a3371/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp314-cp314-win\_amd64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/58911301-ae9b-517c-a28c-92fd88822dbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp39-cp39-macosx\_11\_0\_arm64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/596efaf2-d345-58c0-a6e3-11c1847a1251/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp39-cp39-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/77297d86-9df2-57f5-9b3e-506aade9e7e3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp39-cp39-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/5ceea5f4-09c4-5eeb-bf41-f3a9c06f46ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

### spatio-0.3.0-cp39-cp39-win\_amd64.whl

- [spatio-0.3.0.dist-info/sboms/spatio-py.cyclonedx.json](https://pypi.sbomify.com/artifact/64dd1208-0ad5-5ba1-8c69-5969d88f4f95/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 3 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.27.2 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.27.2 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |
| [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/spatio@0.3.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/spatio/0.3.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/spatio/0.3.0