# SBOM for tract 0.23.10 > Python bindings for tract, a neural network inference engine The Python package tract 0.23.10 ships 91 SBOM files (CycloneDX, SPDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/tract@0.23.10` - PyPI: https://pypi.org/project/tract/0.23.10/ - Author: Mathieu Poumeyrol, Sonos, and tract contributors - License: (Apache-2.0 OR MIT) - Requires Python: \>=3.9 - Documentation: - Source: ## SBOMs ### tract-0.23.10-cp310-cp310-macosx\_10\_13\_universal2.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/b64cb063-9da7-50e4-9106-6ed02e7c2cb5/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/b5633364-20db-544e-ab4c-ff6051b850b8/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp310-cp310-macosx\_10\_13\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/0ce2bc28-a38c-5e55-946b-3ac4870707f5/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/e0774289-e52e-5d3f-976e-854d5c08adc4/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp310-cp310-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/54429d21-f7f4-5bb4-aa5e-f4adef235e3a/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/1582a51d-e14b-5e33-96a4-138ad1196f60/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp310-cp310-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/4598baed-47ae-5ded-82f0-c3f254553b5f/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/7a76611d-3b0c-54a5-91ac-b76cea555e35/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a3fe004e-a986-50d2-b2a6-c31475908c71/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/f2836411-08f6-5cf2-9409-8a735ea97bf6/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/02d0fc97-afba-5965-ae3d-6ea1579169a6/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/7bccc327-b6c4-523f-89bb-d2e047be15b9/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/cce432a7-93e0-5085-8678-bb9e76736507/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp311-cp311-macosx\_10\_13\_universal2.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/cf691a02-27c6-5e76-ab41-e54831c5c323/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/2b342283-ca35-5b55-a70c-a906dfd802d6/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp311-cp311-macosx\_10\_13\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/8b7f4abc-a41f-5858-81e9-fd41ec633270/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/7e0a40c2-f590-5a43-957c-9f95ec5a1289/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/5951e8de-d387-5925-ab91-a95464a8cda8/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/a5646e10-b65f-5e6d-98a0-e026deb56f35/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/3f5d4af6-3eb1-50ba-b185-60cb0029ab7c/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/1a7dc942-aab6-5b31-a974-2c0a26439989/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/39595584-7c55-59cd-9173-806dcb47e558/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/4901f699-31af-5845-88ac-470a2cb231a5/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/810695d5-9a32-5429-ae90-3df55d8db65c/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/7f977931-182f-5eb9-ab06-39cb0e7641a7/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/b6a1f987-f5ac-5ac7-9eb2-0ad5d3e11351/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp312-cp312-macosx\_10\_13\_universal2.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/ff4b9591-baac-5b96-8a22-c70577b4af3c/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/635ed6d2-8041-52d1-ba48-1f320015dd3f/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp312-cp312-macosx\_10\_13\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/e2f004c6-ddd6-5df6-93c5-cd1a2a74f708/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/80f6fecf-3ea9-5622-ac4d-47e44d296078/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/acf0721e-e19d-5522-ae71-837f5dfdaa51/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/9f88b2d9-760a-5623-9b92-4b7567ea6fb9/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/8c33c1dd-78f6-56e3-bbc3-150e750af192/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/dece7129-2ab9-5b1d-8869-28ca306abae9/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8b800f8b-72c1-55c7-8f72-c4d5c05c266e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/2df83616-b956-5821-b0a5-84dc331dde81/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/d8946299-54be-559e-825b-434a84d1ac29/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/1fd20055-8af6-56cf-af85-032ef6e8916b/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/332fd9cb-759a-5a3e-957b-90427268228d/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp313-cp313-macosx\_10\_13\_universal2.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/190cdfa3-b91a-57fc-9476-2099093603b7/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/3c30af86-8f1c-5636-8361-781ffb205575/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp313-cp313-macosx\_10\_13\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/f46f1f4a-960a-528b-b6f5-25d36a0bbcdf/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/8d14d70c-0357-54de-9df1-3dd5667f77f4/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/6dec7cb8-5bc8-5906-ba1b-3aecc3b80356/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/b9e1f0a6-9fe7-5bda-a124-5d5d8e541960/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/d1fbe1c6-dfc6-5c4f-b441-fb75e78ff4ab/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/d82ca996-ba96-5f99-ba2c-353a8787fbd0/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/02e01568-ab7e-5bc9-a24f-a67cea0c8c4f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/7fe0015a-e578-5e02-906d-00a88dbf10ba/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/03270d1e-fc56-5588-b0f5-8402dabf7c22/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/fa41c1c7-cc2d-54c0-9724-86fecb574c53/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/518015f6-2f7d-5b1f-b76d-83cb344b0fe1/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp314-cp314-macosx\_10\_15\_universal2.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/a9722384-f574-536a-82e4-b649c7635393/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/c7b07024-99a2-5f7b-8f94-a10ebd8d2dd1/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp314-cp314-macosx\_10\_15\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/04dadadf-b882-54f4-a064-4a0e8d7bce23/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/4f920cda-a8c2-531e-b697-ba4f3289ad43/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/02c7e7a2-edea-59c5-892f-a0ab79fdd369/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/73ca2a0a-ee84-5b48-9451-580c5a82c810/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/ea304721-3c40-5457-a67a-7ee379b0de54/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/188aa77a-1a93-53ec-ad53-8b178c7d5a6f/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e85a7b3c-c803-5243-b2d5-ff3231f80977/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/b60c7503-6aa4-5eb1-bcbc-d48b328e9efe/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/22eaf7f2-4def-5520-88f3-611c25f564bc/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/476796dd-bf93-5ce0-b030-996a51cc92f7/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/fb926528-355f-56a6-a891-2d6f2a305d72/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp315-cp315-macosx\_10\_15\_universal2.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/f08c0423-6587-5c4a-97a2-08423b3abc87/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/8ff8f87b-21e7-5262-aae8-a44e0c102e86/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp315-cp315-macosx\_10\_15\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/ef4f71c0-e769-5e44-aebc-19959713b9b6/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/0b911346-8a9f-5284-9252-1349b09effa6/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp315-cp315-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/951be070-fb64-52bd-87ca-c122c9a857d4/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/94163d74-cfd3-57cc-a383-d8372d399aab/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp315-cp315-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/e7e25d2d-534b-57bd-a3e4-9e10389be911/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/5624fed6-8760-5bb4-ad63-08142d6c3c6d/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/39759b68-0a6e-5d61-b18e-ad6ae6706933/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/219abe81-558b-5948-9e97-19a234f02e97/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/cfda1fcd-7a33-55f8-8b3e-1ccd498b5ee4/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp315-cp315-win\_amd64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/74fdf627-f1eb-57ac-9a25-f201f7209aec/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/5b40f35c-eae6-5465-a029-e5a8d9b74927/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp39-cp39-macosx\_10\_13\_universal2.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/029d498f-3986-59e6-9521-b9eb6bc644cb/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/136d8a83-6d86-524b-b42d-118ebacf2c86/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp39-cp39-macosx\_10\_13\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/aa713757-9add-5a1f-b30d-2b7a16f66b01/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/8a3ba134-4658-5ab8-82d8-ebbce311edf0/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp39-cp39-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/b8d5f4ec-7224-5d3f-a361-e53a36548923/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/5637beb9-4144-51e7-837f-e9ffc516f126/download): SPDX/2.3, `application/spdx+json`, valid, 1 known vulnerability ### tract-0.23.10-cp39-cp39-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/86da7a1a-1da5-5ce0-8d1c-efdbe4e13b7d/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/1df70cd8-f796-5c8c-91b7-25845890f098/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/afd8b1f8-3502-5650-af6d-8cb91fd4ffc6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/f9e6f5e7-f09e-58a3-9aee-1c9e677b8cf0/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/184d1d9e-590b-523b-8ba3-ce5eebc57387/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ### tract-0.23.10-cp39-cp39-win\_amd64.whl PEP 740 attestation verified (GitHub, sonos/tract, workflow wheels.yml). - [tract-0.23.10.dist-info/sboms/sbom.cdx.json](https://pypi.sbomify.com/artifact/9483f3d4-e8ba-54db-8464-a0815e6551e0/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities - [tract-0.23.10.dist-info/sboms/sbom.spdx.json](https://pypi.sbomify.com/artifact/b2a7e5cc-153a-57dd-bf12-42de1751e195/download): SPDX/2.3, `application/spdx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2024-0436](https://osv.dev/vulnerability/RUSTSEC-2024-0436) | unknown | paste 1.0.15 (crates.io) | none listed | paste - no longer maintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/tract@0.23.10 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/tract/0.23.10.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/tract/0.23.10