# SBOM for toast 3.0.6

> Time Ordered Astrophysics Scalable Tools

The Python package toast 3.0.6 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/toast@3.0.6`
- PyPI: https://pypi.org/project/toast/3.0.6/
- Requires Python: \>=3.10
- Documentation: <https://hpc4cmb.github.io/toast/>
- Issue Tracker: <https://github.com/hpc4cmb/toast/issues>
- Source: <https://github.com/hpc4cmb/toast/>

## SBOMs

### toast-3.0.6-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, hpc4cmb/toast, workflow wheels.yml).

- [toast-3.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9998952f-d40b-5223-8654-17ea527eba6d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### toast-3.0.6-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, hpc4cmb/toast, workflow wheels.yml).

- [toast-3.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dae705a4-b34b-5a60-8de0-05df5f0e4659/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### toast-3.0.6-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, hpc4cmb/toast, workflow wheels.yml).

- [toast-3.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/636c83f5-4aff-50a5-a214-1eb10de3d67f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### toast-3.0.6-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, hpc4cmb/toast, workflow wheels.yml).

- [toast-3.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2fd78bbb-e083-5cb3-b581-44ad29176439/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### toast-3.0.6-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, hpc4cmb/toast, workflow wheels.yml).

- [toast-3.0.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bda6a128-1857-585e-8aa7-7eff079ca29f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/toast@3.0.6
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/toast/3.0.6.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/toast/3.0.6