# SBOM for torchft 0.3.1

The Python package torchft 0.3.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/torchft@0.3.1`
- PyPI: https://pypi.org/project/torchft/0.3.1/
- Requires Python: \>=3.10
- Documentation: <https://meta-pytorch.org/torchft/>
- Issues: <https://github.com/meta-pytorch/torchft/issues>
- Repository: <https://github.com/meta-pytorch/torchft>

## SBOMs

### torchft-0.3.1-cp310-cp310-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

- [torchft-0.3.1.dist-info/sboms/torchft.cyclonedx.json](https://pypi.sbomify.com/artifact/8f3f585f-8dc2-526f-939b-3a03519856bc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### torchft-0.3.1-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

- [torchft-0.3.1.dist-info/sboms/torchft.cyclonedx.json](https://pypi.sbomify.com/artifact/3837ab1c-44e6-5af5-98fc-08619bbf910f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### torchft-0.3.1-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

- [torchft-0.3.1.dist-info/sboms/torchft.cyclonedx.json](https://pypi.sbomify.com/artifact/947dd1f9-007d-564a-b543-7609753d0580/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### torchft-0.3.1-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

- [torchft-0.3.1.dist-info/sboms/torchft.cyclonedx.json](https://pypi.sbomify.com/artifact/05cecd41-fd33-59a1-9291-1ada64cf9bd4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### torchft-0.3.1-cp314-cp314-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

- [torchft-0.3.1.dist-info/sboms/torchft.cyclonedx.json](https://pypi.sbomify.com/artifact/842ea52c-ae8c-5247-b25c-1987f8ecb18f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

### torchft-0.3.1-cp315-cp315-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

- [torchft-0.3.1.dist-info/sboms/torchft.cyclonedx.json](https://pypi.sbomify.com/artifact/5943cf7d-9430-5fd6-a93c-3e86270b8128/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 6 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2021-0139](https://osv.dev/vulnerability/RUSTSEC-2021-0139) | unknown | ansi\_term 0.12.1 (crates.io) | none listed | ansi\_term is Unmaintained |
| [RUSTSEC-2021-0145](https://osv.dev/vulnerability/RUSTSEC-2021-0145) | unknown | atty 0.2.14 (crates.io) | none listed | Potential unaligned read |
| [RUSTSEC-2024-0375](https://osv.dev/vulnerability/RUSTSEC-2024-0375) | unknown | atty 0.2.14 (crates.io) | none listed | \`atty\` is unmaintained |
| [RUSTSEC-2026-0374](https://osv.dev/vulnerability/RUSTSEC-2026-0374) | unknown | basic-toml 0.1.10 (crates.io) | none listed | \`basic-toml\` is unmaintained |
| [RUSTSEC-2024-0370](https://osv.dev/vulnerability/RUSTSEC-2024-0370) | unknown | proc-macro-error 1.0.4 (crates.io) | none listed | proc-macro-error is unmaintained |
| [RUSTSEC-2022-0104](https://osv.dev/vulnerability/RUSTSEC-2022-0104) | unknown | structopt 0.3.26 (crates.io) | none listed | \`structopt\` is in maintenance mode |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/torchft@0.3.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/torchft/0.3.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/torchft/0.3.1