# SBOM for cgeo 0.2.0

> Computational geometry primitives and algorithms with a C++ core

The Python package cgeo 0.2.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/cgeo@0.2.0`
- PyPI: https://pypi.org/project/cgeo/0.2.0/
- Requires Python: \>=3.10
- Homepage: <https://github.com/tomsabala/CGEO>
- Issues: <https://github.com/tomsabala/CGEO/issues>
- Repository: <https://github.com/tomsabala/CGEO>

## SBOMs

### cgeo-0.2.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d16a9c39-90db-52e0-b6b7-dcb81ba5dd98/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### cgeo-0.2.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e32b2f55-aca3-552d-a75d-286daf4ea41c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### cgeo-0.2.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fa804e31-07f8-5077-8864-d864cc789eee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### cgeo-0.2.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e86a9be2-7339-5890-8089-908e36077dd8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### cgeo-0.2.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a67824d9-efcb-5168-ad23-9a17a0b008ee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### cgeo-0.2.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6732048e-33ae-54d6-8822-3ec77058c089/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### cgeo-0.2.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/614090f6-24b0-572d-a5f2-f7560d2f7fb4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### cgeo-0.2.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4f94ec57-1d87-53ab-a095-be923558e12b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### cgeo-0.2.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3bcf183f-3fc6-528a-8fba-4831c5f2d928/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### cgeo-0.2.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, tomsabala/CGEO, workflow release.yml).

- [cgeo-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a39d2fc9-f0a5-5bfa-a5cc-2aa3f3772c8b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/cgeo@0.2.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/cgeo/0.2.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/cgeo/0.2.0