# SBOM for acquire-zarr 0.10.0

> Performant streaming to Zarr storage, on filesystem or cloud

The Python package acquire-zarr 0.10.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/acquire-zarr@0.10.0`
- PyPI: https://pypi.org/project/acquire-zarr/0.10.0/
- Requires Python: \>=3.10

## SBOMs

### acquire\_zarr-0.10.0-cp310-cp310-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/36e6aee5-1f31-5e8e-8d7a-e4da8394cd18/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### acquire\_zarr-0.10.0-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/afa332f0-36df-5402-9896-faa716fc65b8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### acquire\_zarr-0.10.0-cp311-cp311-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a03a1286-6a0c-5d36-b0ae-2fd92f563b4d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### acquire\_zarr-0.10.0-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9ed91a62-0a3f-5985-be74-90f37107a5aa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### acquire\_zarr-0.10.0-cp312-cp312-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/870b1e2c-81c0-5b01-80c7-b619c2a56f01/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### acquire\_zarr-0.10.0-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/79e63168-8148-5df4-a5d9-81e09481227d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### acquire\_zarr-0.10.0-cp313-cp313-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6222d6b2-bc3d-5fa5-b2a8-efaffa029429/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### acquire\_zarr-0.10.0-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/145f04f1-18a7-58b8-a65b-c9ecb54c88e5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### acquire\_zarr-0.10.0-cp314-cp314-manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a31bb02a-bfa1-5dfd-9129-49ff6f754425/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### acquire\_zarr-0.10.0-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, acquire-project/acquire-zarr, workflow release.yml).

- [acquire\_zarr-0.10.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a9f1e4e4-c7fe-5921-a2ac-2e8bfbc368e2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/acquire-zarr@0.10.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/acquire-zarr/0.10.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/acquire-zarr/0.10.0