# SBOM for tda 0.4.0 > Topological Data Analysis in Python, written in Rust. Not limited to H0 and H1. The Python package tda 0.4.0 ships 29 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/tda@0.4.0` - PyPI: https://pypi.org/project/tda/0.4.0/ - Requires Python: \>=3.11 - Homepage: - Issues: - Repository: ## SBOMs ### tda-0.4.0-cp311-cp311-macosx\_10\_12\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/2a2622ce-b455-5b80-a6a2-57d524d0e5bd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp311-cp311-macosx\_11\_0\_arm64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/b7be9537-e495-5516-8402-14153437676f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/ea9cdf08-b9ad-57a6-a10e-1d93f388fc84/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/6ec8a5af-a9c6-598b-abed-351ca64a8368/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp311-cp311-win\_amd64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/74cbef23-8f58-561d-9947-0da49401a426/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp312-cp312-macosx\_10\_12\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/9b32eb13-cb4a-5762-bd8c-45bb79d2be77/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp312-cp312-macosx\_11\_0\_arm64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/b8be1f36-8aea-5050-9c36-4a13b700a129/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/44494dbe-531a-5b59-b05e-80d5da66b3c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/6e31dd79-dd3b-535c-b96c-917210abed3f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp312-cp312-win\_amd64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/00f3898a-1fcf-59c8-b263-5a4bb1e62999/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp313-cp313-macosx\_10\_12\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/7c2e5538-c355-5fe5-ae18-caa3dfba20bc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp313-cp313-macosx\_11\_0\_arm64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/d1789082-c742-5d62-b9d0-73001398714e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/be5b63e3-5db2-5f6e-a04e-09a3222c7579/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/31ca744b-c375-5661-8226-0b97d571e5da/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp313-cp313-win\_amd64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/69caeb8f-1262-575f-8f88-3f43c674103b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp314-cp314-macosx\_10\_12\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/39034091-be8e-5188-ae5e-98051c6dbba1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp314-cp314-macosx\_11\_0\_arm64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/e6632d7e-54ff-50b5-90b0-19737441671f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/1e53fe3a-d046-5d40-b9b7-1acfce054d6a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/f0bb2f1b-b324-5a89-82ef-93b1e7eb9937/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp314-cp314-win\_amd64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/1768f0e7-2f91-5d99-ae8b-2917a871daee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/bcded8a7-2476-5e46-b213-88cd3d8e3e03/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/533d1ffe-72f8-5169-9cc2-c04322b55fbc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp315-cp315-macosx\_10\_12\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/21668332-e87b-5823-b1f6-79c15b544879/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp315-cp315-macosx\_11\_0\_arm64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/afb935fd-fe85-526f-a531-c614af6e7f46/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp315-cp315-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/0bde63b3-3d90-59e9-aa17-7d2d059aa0ff/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp315-cp315-win\_amd64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/187a2adb-d00a-56e2-a43b-25ff17b4f41f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-cp315-cp315t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/672d77f9-5863-5398-88ec-11e003197064/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-pp311-pypy311\_pp73-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/35d59129-9c6a-545f-a41e-76b893c1d2d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### tda-0.4.0-pp311-pypy311\_pp73-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [tda-0.4.0.dist-info/sboms/tda\_python.cyclonedx.json](https://pypi.sbomify.com/artifact/b0876ada-df68-57fc-9fed-42165c5518c8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators | | [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/tda@0.4.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/tda/0.4.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/tda/0.4.0