# SBOM for brian2 2.11.0

> A clock-driven simulator for spiking neural networks

The Python package brian2 2.11.0 ships 3 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/brian2@2.11.0`
- PyPI: https://pypi.org/project/brian2/2.11.0/
- Author: Marcel Stimberg, Dan Goodman, Benjamin Evans, Romain Brette
- Requires Python: \>=3.13
- Bluesky: <https://bsky.app/profile/briansimulator.org>
- Changelog: <https://brian2.readthedocs.io/en/stable/introduction/release_notes.html>
- Coverage: <https://coveralls.io/github/brian-team/brian2>
- Documentation: <https://brian2.readthedocs.io/>
- Homepage: <https://briansimulator.org>
- Mastodon: <https://neuromatch.social/@briansimulator>
- Source: <https://github.com/brian-team/brian2>
- Tracker: <https://github.com/brian-team/brian2/issues>

## SBOMs

### brian2-2.11.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, brian-team/brian2, workflow publish.yml).

- [brian2-2.11.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/958b01af-89f6-5667-b611-ffc09cc271f4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### brian2-2.11.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, brian-team/brian2, workflow publish.yml).

- [brian2-2.11.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/22d9e41d-e8a8-584b-a389-afcfd3be1353/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### brian2-2.11.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, brian-team/brian2, workflow publish.yml).

- [brian2-2.11.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/837fd6d0-53c7-5f89-a7d6-5ce096895df1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/brian2@2.11.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/brian2/2.11.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/brian2/2.11.0