# SBOM for ty 0.0.99 > An extremely fast Python type checker, written in Rust. The Python package ty 0.0.99 ships 17 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/ty@0.0.99` - PyPI: https://pypi.org/project/ty/0.0.99/ - Requires Python: \>=3.8 - Changelog: - Discord: - Homepage: - Releases: - Repository: ## SBOMs ### ty-0.0.99-py3-none-linux\_armv6l.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/08264f84-631d-545b-813c-b34f510c7924/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-macosx\_10\_12\_x86\_64.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/0b965f8c-7a24-5acd-9450-d3d72f502fbf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-macosx\_11\_0\_arm64.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/c854ca8e-c39f-5d26-9fe1-6761475f8749/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/161e3277-9875-5227-8e2d-b4960fc727e3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/830d752f-bd9b-58f9-8f2b-aa74e61e721b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-manylinux\_2\_17\_i686.manylinux2014\_i686.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/c3e7d51d-e44a-590b-ac8c-63258ba66a80/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/456075b4-8076-5a78-9e5c-30a6742dabff/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/fde46d87-062e-5239-a740-f49c3c5db924/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/c2003f3a-8786-511f-b1c4-33128bf945a9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-manylinux\_2\_31\_riscv64.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/9843238a-7ae0-5106-89a7-9bd231a3f4ee/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-musllinux\_1\_2\_aarch64.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/ff2e5d80-6345-5d96-a086-47bccdf496c0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-musllinux\_1\_2\_armv7l.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/58f5e58d-1005-5720-be11-5f5f0709ec4c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-musllinux\_1\_2\_i686.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/b31dfdd2-a145-5179-b528-79f57d3142ad/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-musllinux\_1\_2\_x86\_64.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/d144352a-c749-573d-b8d5-2b58856a7670/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-win32.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/04b25f15-5bab-5994-ae94-45de57bb6f9d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-win\_amd64.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/819e47b3-60b2-55b7-86ca-2fd7c475829c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ### ty-0.0.99-py3-none-win\_arm64.whl - [ty-0.0.99.dist-info/sboms/ty.cyclonedx.json](https://pypi.sbomify.com/artifact/eeaf1ad1-dbc6-54ff-b258-38ef9320c84c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [RUSTSEC-2026-0204](https://osv.dev/vulnerability/RUSTSEC-2026-0204) | unknown | crossbeam-epoch 0.9.18 (crates.io) | 0.9.20 | Invalid pointer dereference in \`fmt::Pointer\` impl for \`Atomic\` and \`Shared\` when the underlying pointer is invalid | | [RUSTSEC-2026-0173](https://osv.dev/vulnerability/RUSTSEC-2026-0173) | unknown | proc-macro-error2 2.0.1 (crates.io) | none listed | proc-macro-error2 is unmaintained | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/ty@0.0.99 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/ty/0.0.99.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/ty/0.0.99