# SBOM for balafon 3.7.1

> Contacts management

The Python package balafon 3.7.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/balafon@3.7.1`
- PyPI: https://pypi.org/project/balafon/3.7.1/
- Author: Luc Jean
- License: CeCILL 2.1
- Homepage: <https://github.com/ljean/balafon>

## SBOMs

### balafon-3.7.1-py3-none-any.whl

- [balafon/ci/ci\_project/env2/lib/python3.12/site-packages/pillow-13.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c30ac0be-4870-5413-a028-4c862b9299b6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [balafon/ci/ci\_project/env2/lib/python3.12/site-packages/pillow-13.0.0.dist-info/sboms/pillow-13.0.0.cdx.json](https://pypi.sbomify.com/artifact/bcc52ccc-57f0-5a0a-ad70-6fca32be1b8c/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [balafon/ci/ci\_project/env2/lib/python3.12/site-packages/psycopg2\_binary-2.9.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b027004d-3adf-57f0-bcbc-076b8ac87643/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [balafon/ci/ci\_project/env2/lib64/python3.12/site-packages/pillow-13.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/139ee251-d2fb-5bd0-9aba-8a3c650e81e0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [balafon/ci/ci\_project/env2/lib64/python3.12/site-packages/pillow-13.0.0.dist-info/sboms/pillow-13.0.0.cdx.json](https://pypi.sbomify.com/artifact/71c43b88-cda3-53a2-893e-e48d163b2faa/download): CycloneDX/1.7, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
- [balafon/ci/ci\_project/env2/lib64/python3.12/site-packages/psycopg2\_binary-2.9.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4cbc704d-8dbb-5898-a914-a6a66c497cce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/balafon@3.7.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/balafon/3.7.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/balafon/3.7.1