sbomify PyPI TEA Start free

SBOM for travertine 0.50.0.post1

Generating pricing tables from pricing programs

CycloneDX 3 known vulnerabilities
Requires Python
>=3.10
PyPI
travertine 0.50.0.post1
Documentation
https://merchise-autrement.gitlab.io/travertine/
Repository
https://gitlab.merchise.org/mercurio-2018/travertine/

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

travertine-0.50.0.post1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

travertine.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 3 known vulnerabilities
Download

travertine-0.50.0.post1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

travertine.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 3 known vulnerabilities
Download

travertine-0.50.0.post1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

travertine.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 3 known vulnerabilities
Download

travertine-0.50.0.post1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

travertine.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 3 known vulnerabilities
Download

travertine-0.50.0.post1-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

travertine.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 3 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2024-0370
proc-macro-error is unmaintained
 Unknown proc-macro-error 1.0.4
crates.io
 —
RUSTSEC-2026-0097
Rand is unsound with a custom logger using `rand::rng()`
 Unknown rand 0.8.5
crates.io
 0.8.6
RUSTSEC-2026-0235
Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
 Unknown rkyv 0.7.46
crates.io
 0.8.17

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]