# SBOM for bermuda 0.1.8 > Spatial algorithms for napari project, compiled for performance The Python package bermuda 0.1.8 ships 18 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/bermuda@0.1.8` - PyPI: https://pypi.org/project/bermuda/0.1.8/ - Requires Python: \>=3.9 - Bug Tracker: - Documentation: - Source Code: ## SBOMs ### bermuda-0.1.8-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0d17d78b-7043-5890-874b-31515f7457d3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6bfeb3bd-38e0-5f34-9dfb-888a9e5fa33c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/808a4c86-7266-5f08-a9ea-8d8892fcb31b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b079b3bc-8be3-5672-b51b-b20e6061135e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dee38556-700e-53d1-b812-4ecc34ae33eb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0fd0332d-b0dd-503e-b2e5-2ffa058bfef9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dc01f8b1-949d-535c-889e-20976b43b89f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2a6b2371-81b1-5cee-8006-3a474e8cfbec/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7fbef216-e7ff-5a03-8084-c384f3fcddd1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/905a35d7-1427-5890-ac26-7cc0730e44cc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ca9d8acd-378f-5cf9-af0a-15b797fbc634/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/031c8931-762c-51fe-a6a2-938e5ef4e4dc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/51cbdf7a-3b71-54a1-9900-eb15b3875891/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/de84baf7-41e1-51ef-b59a-a3dbc3a1b7c5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1c8437a2-7a39-5b9d-8a6e-458735a4f4f4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/90000181-3507-5b5e-a379-5135ce62f02a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6cf43c55-406c-5706-ad95-60f1a95d9cb9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### bermuda-0.1.8-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, napari/bermuda, workflow publish\_pypi.yml). - [bermuda-0.1.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0e64b9a6-b292-5830-8337-61b3cc6b5cf7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/bermuda@0.1.8 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/bermuda/0.1.8.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/bermuda/0.1.8