# SBOM for toast 3.0.0a43

> Time Ordered Astrophysics Scalable Tools

The Python package toast 3.0.0a43 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/toast@3.0.0a43`
- PyPI: https://pypi.org/project/toast/3.0.0a43/
- Author: Theodore Kisner, Reijo Keskitalo
- License: BSD
- Requires Python: \>=3.10.0
- Homepage: <https://github.com/hpc4cmb/toast>

## SBOMs

### toast-3.0.0a43-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, hpc4cmb/toast, workflow wheels.yml).

- [toast-3.0.0a43.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d1bea3c6-ef3a-5c00-b781-cd4ca9135763/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### toast-3.0.0a43-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, hpc4cmb/toast, workflow wheels.yml).

- [toast-3.0.0a43.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a623e58d-374f-52bd-aa0a-07808a25e71e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### toast-3.0.0a43-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, hpc4cmb/toast, workflow wheels.yml).

- [toast-3.0.0a43.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/668e49d2-246f-5f48-91a9-45110d50760f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### toast-3.0.0a43-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, hpc4cmb/toast, workflow wheels.yml).

- [toast-3.0.0a43.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/60f473c9-9da7-50ee-a0ac-8002f85f2172/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/toast@3.0.0a43
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/toast/3.0.0a43.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/toast/3.0.0a43