# SBOM for blake2b-py 0.4.0 > Blake2b hashing in Rust with Python bindings. The Python package blake2b-py 0.4.0 ships 11 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/blake2b-py@0.4.0` - PyPI: https://pypi.org/project/blake2b-py/0.4.0/ - License: MIT - Requires Python: \<4,\>=3.10 - Bug Tracker: - Homepage: - Repository: ## SBOMs ### blake2b\_py-0.4.0-cp310-cp310-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/895ed6e8-3cf8-521c-a0fe-975cfa189b2e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3cdada2c-76d9-507d-85f7-512a2fc7d003/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/33531804-8e4b-5814-bdec-d8a41ed4c3fc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/88827be8-8167-54b8-a796-b360a97b67b5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b9ac6940-945d-54ef-824b-cf15e17e8667/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b8a81fa6-f98c-56b8-bbd1-bccee382f263/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/c0aec2a1-48b6-5c54-bcdb-962e8bebf26f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/4c4a75fa-ffa5-5e85-a12e-258d7c73e808/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/22e5dc72-9277-5445-ad57-be411c35d729/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/cb67dbb1-788b-5766-ad57-590d89f76c3d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### blake2b\_py-0.4.0-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ApeWorX/blake2b-py, workflow publish.yaml). - [blake2b\_py-0.4.0.dist-info/sboms/blake2b-py.cyclonedx.json](https://pypi.sbomify.com/artifact/967a7823-3acb-5334-a59a-b0b3242f6b86/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/blake2b-py@0.4.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/blake2b-py/0.4.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/blake2b-py/0.4.0