# SBOM for totp-rs 2.0.0 > RFC 6238 time-based one-time password implementation The Python package totp-rs 2.0.0 ships 80 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/totp-rs@2.0.0` - PyPI: https://pypi.org/project/totp-rs/2.0.0/ - Requires Python: \>=3.11 - Issues: - Repository: ## SBOMs ### totp\_rs-2.0.0-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/01c5d717-92ef-5ecc-973b-ef5f9793a548/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp311-cp311-macosx\_11\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/18c0d2ff-f85a-5f59-be28-f01e594cae36/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f1defbf3-2a45-5a6f-b502-22031a73c8a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f9e83c08-1fc6-544c-a3c1-05c2c4f672e1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f3c3ebd8-fb93-5610-b304-0254bc50ca15/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/712a13df-5bf3-5a9d-a09c-adcfcb9b5c09/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/82690e80-422b-500c-a8c6-b2fe80e2d7ad/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e8ca8a70-6ab8-5634-959d-c23d12e318e9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b837c816-96dc-556f-8734-e4422a687515/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp311-cp311-win\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/72a34f6a-73d1-59b4-9bc1-e1cc8f0b4218/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f7ea7d80-e11e-58de-a6be-ba65d479ee87/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp312-cp312-macosx\_11\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/0594b326-9af6-5205-a99a-b70669445b56/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp312-cp312-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/7c4dcd9f-2488-53aa-a58c-24f60121353a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/1f391cf0-1fdd-5ed9-9fae-b9dabd06cd38/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6ec0b179-0b9a-5c3b-a97a-4367329116e9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/4c5c80ab-a131-5ded-9c6e-dc71a96782a4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8f999901-ae30-5d33-bc28-64513c3d826b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/16643a63-bb83-525d-ac9a-ff3676cd7839/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/eee439e4-1f4b-575d-a25e-47d524c30b00/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp312-cp312-win\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/9fba8a05-3027-534b-b2c5-ca4e69ffe908/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/77e34361-dcaf-5e7f-a215-8d86e7a6c278/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp313-cp313-macosx\_11\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/eea1c21e-0166-5365-b8c3-a3fd6861a81f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp313-cp313-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/70437e7f-716b-5c5e-8093-19e24efca173/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/4ffea5dc-dcae-5d44-ac25-84914c9e9d8f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f1666c48-ec82-5852-945b-d04d244e24d1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/494aeb94-d598-5156-9d4c-a375948d117f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b0c56ab4-8773-59df-b6d4-a707a5d5ed6e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d1568a3b-20fd-5c44-abe8-e11fa152a203/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/00205515-74d0-5cc1-8add-493dab8a1428/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp313-cp313-win\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/bfad5a12-7b48-5dba-ad1a-172ef2c678c4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b83a7d94-ea97-598f-a4be-13299ffe69be/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314-macosx\_11\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e34f875b-8c3d-568b-994d-0c3616e635f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/94ced1c8-e10e-5a25-bc63-7ad645d70eba/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d18e4b0e-f32a-589a-949e-bee7e16d9d1c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e29bd040-1d89-5b40-8b33-998d1b32393a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/4fc8ce1a-c1f6-5d2f-a43c-9b3f9807d74d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/65db9895-8f53-5322-92bb-98a7b92f71c4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/b0eb588a-cad9-5035-8648-4aca67ece14f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/fc64b6c8-4ab0-5996-b4f9-1e62f03fb217/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314-win\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/785e2a28-f767-5d04-8227-493c5cfaab55/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5a10a279-bfd1-5139-ad8b-8cb5fff26cfa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314t-macosx\_11\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e4981d8f-cd9f-5325-b36c-26ef374576d2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314t-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/5e4b47ac-756d-5d94-b176-31199e9ebc30/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/e347b0cb-ddc6-5f96-99f9-bc87ab8c47c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ed05520b-0f1b-59c6-8918-032ff5bf13d9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a0b542d7-cf8a-52e7-bbed-cba7ffe3eae9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/54423285-d09d-5eac-85ea-e620f4854d65/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/68b8a0a5-703b-5a00-8a6d-722829eaf751/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314t-win\_amd64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/f8551715-082e-50b3-94a0-002ee081d933/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp314-cp314t-win\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d2cb360e-3274-5ccf-a8ad-a3259cdf9ac9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-abi3.abi3t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/0f582819-028f-54f2-bfbf-f428561d2566/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-abi3.abi3t-macosx\_11\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/8c057cd3-e786-5268-b5ea-d9eb46768f7d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-abi3.abi3t-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/db6afe69-a7ef-5746-bcbf-5064c376aa13/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-abi3.abi3t-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ff9fa59b-ba82-500a-aafb-f688d30eef47/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-abi3.abi3t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1f5b3525-db1b-5379-b008-ef1bcbe938e9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d1beda93-78a0-5059-9ecb-fd8e9c535170/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-abi3.abi3t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0759e243-3f0e-5ae5-ba1a-6bced968fc10/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/8a76d213-800e-507b-b31e-1824f68f835d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-abi3.abi3t-win\_amd64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a985b316-5c83-5438-883b-e2dcbc97eef7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-abi3.abi3t-win\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/73c88966-f05a-50f4-8054-a94758ee4f7f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a6beeeba-9059-5c1a-9177-e9393cfd5c75/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315-macosx\_11\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/424aecca-5ac9-57ce-b064-ee7df0ced80a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/9dbee9f8-5e34-5bb5-b861-ea01f169440a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/996aef20-e54b-5554-8388-02f6106a4ab9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cd58d73e-6f8d-5e8e-822d-87dae6c559a6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ae52bb54-51cf-5c43-a6f9-b2ef322c7b2d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ec9edb7b-0c24-5287-9d15-d55a843de930/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d193af2b-20a8-55ca-a06b-49b1a73f091d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315-win\_amd64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/d965385b-9e60-5d4c-abb4-8561c07731f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315-win\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/fc412cb8-6d7f-54a8-a8ef-aea74ed0fd14/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/eee6ace5-d921-5a03-9372-086fa33ccffb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315t-macosx\_11\_0\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/58754a76-3563-508e-aac5-b915acb3ec0b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315t-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/40119547-5832-5aef-9555-034a8c7bd1ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315t-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/90833669-d8e7-52ba-9e2f-97d4d63a47ff/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/652d2f57-1130-5871-ae26-a6b0b4e76cbd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/a469a9a5-6628-5044-8f02-4bfcce07c1b1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c711754a-62c9-5da7-b9b8-bbe0d1321973/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/ddac0c73-dc4e-5677-b0ab-7b6b6f754e32/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315t-win\_amd64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/fee3cdb5-3732-5c50-b551-fe9fe25bd2f6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### totp\_rs-2.0.0-cp315-cp315t-win\_arm64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [totp\_rs-2.0.0.dist-info/sboms/totp\_rs.cyclonedx.json](https://pypi.sbomify.com/artifact/04197f51-50b8-59ff-bb55-9b3dc8ea9f97/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/totp-rs@2.0.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/totp-rs/2.0.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/totp-rs/2.0.0