# SBOM for archi 3.8.11.0 > Multi-format archive library based on libarchive The Python package archi 3.8.11.0 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/archi@3.8.11.0` - PyPI: https://pypi.org/project/archi/3.8.11.0/ - Author: Wu Haotian - License: MIT - Requires Python: \>=3.9 - Homepage: ## SBOMs ### archi-3.8.11.0-cp39-abi3-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, whtsky/archi, workflow ci.yml). - [archi-3.8.11.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/75b718e0-0676-59dc-aef1-de380fd09e8d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### archi-3.8.11.0-cp39-abi3-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, whtsky/archi, workflow ci.yml). - [archi-3.8.11.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6f021e4f-98d3-5553-aff8-76df9b4a1a3d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### archi-3.8.11.0-cp39-abi3-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, whtsky/archi, workflow ci.yml). - [archi-3.8.11.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3ac628dc-aa89-5eb6-ab4c-2d528aa56008/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### archi-3.8.11.0-cp39-abi3-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, whtsky/archi, workflow ci.yml). - [archi-3.8.11.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b791e941-0f34-5fc4-8d3a-3a0343efaed4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/archi@3.8.11.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/archi/3.8.11.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/archi/3.8.11.0