# SBOM for tangram-core 0.6.0 > A framework for real-time air traffic management research The Python package tangram-core 0.6.0 ships 54 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/tangram-core@0.6.0` - PyPI: https://pypi.org/project/tangram-core/0.6.0/ - Requires Python: \>=3.10 - Homepage: ## SBOMs ### tangram\_core-0.6.0-cp310-cp310-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/557a0d1d-2a6c-5a93-b578-ed25d32fb8a3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/64305848-3ba0-54a7-a660-b01dcdf5be91/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/82107ba3-14c1-53c4-b0d3-edaecb85bafc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-manylinux\_2\_28\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/206cdb0c-1520-533d-8e3d-7721a48c3ef5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-manylinux\_2\_28\_i686.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c0939511-ed03-51b7-94c0-48ea67f4cc3f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-manylinux\_2\_28\_ppc64le.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/27c80415-7f00-50cd-83b3-2987209a20ae/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/912e6ff9-9b29-5d42-8c79-7f91bc904270/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-musllinux\_1\_1\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/3aada548-e253-5a28-8595-586f3e0190b1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-musllinux\_1\_1\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/3cf47978-49a3-5533-b36e-0149e4e47959/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-musllinux\_1\_1\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5a11efaf-02b6-5e7c-8fe4-208940753f61/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/92fe2cf1-0501-5b3d-a5af-cffdcfc41a39/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/df738466-dba8-5738-8eda-b5afcb3c0ab3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/cad7f068-8b89-5dc3-b1d2-7fff02a82e31/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/23b5464b-4773-554a-a5e1-fa042e64e1ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-manylinux\_2\_28\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/735f85b2-c20b-522f-94d0-a246d59fee3c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-manylinux\_2\_28\_i686.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/325419d3-3f26-5939-a029-8833c2ebc970/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-manylinux\_2\_28\_ppc64le.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/01a11800-9cf5-5f29-9573-45f33499782f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2ba50a79-9cd5-516c-916b-9162e13807aa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-musllinux\_1\_1\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/4eac5a8a-05c9-54c8-8ae6-11116d7ac29b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-musllinux\_1\_1\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/59397639-8b51-57f6-ad6c-51ccebcf85da/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-musllinux\_1\_1\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/38f2c7fd-6993-595d-b5e4-71beec9b5585/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/8665ed58-c93f-5ffc-b48f-1b8d9500dc08/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/823e7983-ff2b-5ff5-8130-5cde538fa782/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/49589204-f68d-5c77-ae65-8f6c4e9a2bb2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e8eccdaa-cac5-5521-862b-be695f41a583/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-manylinux\_2\_28\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ed8569ff-0262-56bf-960f-26f04fed5d19/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-manylinux\_2\_28\_i686.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/74a3061b-d74e-59e8-ae0f-b06c36d75972/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-manylinux\_2\_28\_ppc64le.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b060b069-fa18-54c1-8a21-356ca087f549/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/27995145-f92d-51fb-b02b-4b98051a6a28/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-musllinux\_1\_1\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/10e75eab-045e-556b-8370-d4af1dd308a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-musllinux\_1\_1\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/fcec6e38-de60-5070-bfcc-3dbaabd9b4bf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-musllinux\_1\_1\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/0a6b6127-ff5f-5534-98fd-cb52bf888169/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/cc307fdd-e58d-5809-8bff-d5b014044ba9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/1c897393-94c9-5fac-b5be-d5d7f8cb0a43/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/55580020-eae8-509c-af89-5da45e50fd04/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/2d35d961-7346-56bc-b393-9ae6400d7fca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-manylinux\_2\_28\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d40750cd-6a09-5463-aad2-a764323ea9e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-manylinux\_2\_28\_i686.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/25028445-6797-50f4-b35e-1adf0bb7e55a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-manylinux\_2\_28\_ppc64le.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/c91344e3-5dc1-5ede-86c0-4642fbc06408/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a475bdbf-a162-5c99-93b7-342686390b03/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-musllinux\_1\_1\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/705b5d43-1148-5f8e-bfb8-279eb434817f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-musllinux\_1\_1\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e371f1ae-f5c5-5ffc-a019-f8162f0b8ce5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-musllinux\_1\_1\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f2415ad6-b89f-57e9-8a01-a55c06e85b94/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/573f5a4f-6f83-5e51-b6ab-e1bbad273044/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/93b15ac8-e665-541a-8c8e-727f41bb2e6a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e9fc52ef-0c64-5af1-a66c-b339b0b8c60a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/1fe1fc2f-2246-50bd-9de7-4e1d627e37b6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-manylinux\_2\_28\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f499e58f-17fe-54d4-813f-7766c339dcb7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-manylinux\_2\_28\_i686.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/171d77ef-6057-5376-9a37-8c735190e1ec/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-manylinux\_2\_28\_ppc64le.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7194ed60-bc9e-5dd5-9c4a-a9c2aa3c1215/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/4b979c34-a8b4-5f6c-a15c-7fbe577c1e62/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-musllinux\_1\_1\_aarch64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/52c04fc6-d9ad-5112-9879-814bf3e0eb27/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-musllinux\_1\_1\_armv7l.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/26f7244e-5928-5fe4-8636-e5333025f0d9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ### tangram\_core-0.6.0-cp314-cp314-musllinux\_1\_1\_x86\_64.whl PEP 740 attestation verified (GitHub, open-aviation/tangram, workflow release.yml). - [tangram\_core-0.6.0.dist-info/sboms/tangram\_core\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e1a7a17d-d847-501b-984f-2010ef16eda0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 9 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-3336](https://insights.sbomify.com/CVE-2026-3336/) | high (8.7) | aws-lc-sys 0.34.0 (crates.io) | 0.38.0 | PKCS7\_verify Certificate Chain Validation Bypass in AWS-LC | | [CVE-2026-3337](https://insights.sbomify.com/CVE-2026-3337/) | high (8.2) | aws-lc-sys 0.34.0 (crates.io) | 0.38.0 | Timing Side-Channel in AES-CCM Tag Verification in AWS-LC | | [RUSTSEC-2026-0044](https://osv.dev/vulnerability/RUSTSEC-2026-0044) | high (8.2) | aws-lc-sys 0.34.0 (crates.io) | 0.39.0 | AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN | | [CVE-2026-3338](https://insights.sbomify.com/CVE-2026-3338/) | high (7.5) | aws-lc-sys 0.34.0 (crates.io) | 0.38.0 | PKCS7\_verify Signature Validation Bypass in AWS-LC | | [CVE-2026-4428](https://insights.sbomify.com/CVE-2026-4428/) | high (7.4) | aws-lc-sys 0.34.0 (crates.io) | 0.39.0 | CRL Distribution Point Scope Check Logic Error in AWS-LC | | [GHSA-6g2r-675j-hx59](https://osv.dev/vulnerability/GHSA-6g2r-675j-hx59) | low (2.3) | xxhash-rust 0.8.15 (crates.io) | 0.8.16 | xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release | | [RUSTSEC-2026-0441](https://osv.dev/vulnerability/RUSTSEC-2026-0441) | unknown | pin-utils 0.1.0 (crates.io) | none listed | \`pin-utils\` is unmaintained | | [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) | unknown | rand 0.9.2 (crates.io) | 0.9.3 | Rand is unsound with a custom logger using \`rand::rng()\` | | [RUSTSEC-2026-0386](https://osv.dev/vulnerability/RUSTSEC-2026-0386) | unknown | tokio 1.53.1 (crates.io) | 1.53.3 | \`AsyncFd::new\` and related constructors violate I/O safety | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/tangram-core@0.6.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/tangram-core/0.6.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/tangram-core/0.6.0