# SBOM for syntax-checker 0.4.2 > A syntax checker for multiple languages using tree-sitter The Python package syntax-checker 0.4.2 ships 13 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/syntax-checker@0.4.2` - PyPI: https://pypi.org/project/syntax-checker/0.4.2/ - Requires Python: \>=3.9 - Homepage: ## SBOMs ### syntax\_checker-0.4.2-cp39-abi3-macosx\_10\_12\_x86\_64.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/cc186e96-e9c4-5eb8-905b-151485d9083f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-macosx\_11\_0\_arm64.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/ab1281ac-da46-509a-b376-2cb93f39dbbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/146cfc7a-289e-53bd-b3c8-46ab0ea3f7a8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/c893a23f-f305-56a0-a7c3-3fa5a7905c55/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/bebbe31e-7d18-5b46-8f87-1ad58625521b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/0f18f373-f409-5794-97f8-cd76b2d2e2e0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-manylinux\_2\_5\_i686.manylinux1\_i686.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/eb10fc91-7a33-5761-8e5f-429c6cefae98/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-musllinux\_1\_2\_aarch64.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/8e848f59-918d-5366-bf4d-0acb3b7a29c4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-musllinux\_1\_2\_armv7l.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/8f937bdd-f615-57fc-87f4-41b91336b7a2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-musllinux\_1\_2\_i686.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/6be2631c-32e1-54bb-a88f-f60f0ffbafa4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-musllinux\_1\_2\_x86\_64.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/f331981f-528e-5b6a-9d90-1d454c7f3338/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-win32.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/c5f03539-812b-5ddf-8d12-9ddcf67d1c37/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### syntax\_checker-0.4.2-cp39-abi3-win\_amd64.whl - [syntax\_checker-0.4.2.dist-info/sboms/syntax-checker.cyclonedx.json](https://pypi.sbomify.com/artifact/afd021d9-2908-501f-b9d6-b11689431351/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/syntax-checker@0.4.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/syntax-checker/0.4.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/syntax-checker/0.4.2