# SBOM for changenog 2.0.8

> Zero-config changelog generator with monorepo support.

The Python package changenog 2.0.8 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/changenog@2.0.8`
- PyPI: https://pypi.org/project/changenog/2.0.8/
- Author: Donk
- License: ISC
- Requires Python: \>=3.8
- bugs: <https://github.com/Daniel-Knights/changenog/issues>
- changelog: <https://github.com/Daniel-Knights/changenog/blob/main/CHANGELOG.md>
- homepage: <https://github.com/Daniel-Knights/changenog>

## SBOMs

### changenog-2.0.8-py3-none-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, Daniel-Knights/changenog, workflow release.yml).

- [changenog-2.0.8.dist-info/sboms/changenog.cyclonedx.json](https://pypi.sbomify.com/artifact/2237540d-1083-55f6-bc55-83ce7851bfbd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### changenog-2.0.8-py3-none-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, Daniel-Knights/changenog, workflow release.yml).

- [changenog-2.0.8.dist-info/sboms/changenog.cyclonedx.json](https://pypi.sbomify.com/artifact/37c4c51f-c89e-5d80-83c2-96dcbf5f726c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### changenog-2.0.8-py3-none-manylinux\_2\_39\_aarch64.whl

PEP 740 attestation verified (GitHub, Daniel-Knights/changenog, workflow release.yml).

- [changenog-2.0.8.dist-info/sboms/changenog.cyclonedx.json](https://pypi.sbomify.com/artifact/2f7d73bd-7059-541f-b3f9-c4c2c92b0fa8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### changenog-2.0.8-py3-none-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, Daniel-Knights/changenog, workflow release.yml).

- [changenog-2.0.8.dist-info/sboms/changenog.cyclonedx.json](https://pypi.sbomify.com/artifact/6e9194b2-b909-5768-9b8c-9c30fd9af8e4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### changenog-2.0.8-py3-none-win\_amd64.whl

PEP 740 attestation verified (GitHub, Daniel-Knights/changenog, workflow release.yml).

- [changenog-2.0.8.dist-info/sboms/changenog.cyclonedx.json](https://pypi.sbomify.com/artifact/50335f96-fbff-5829-b392-eb2bf6dfc507/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### changenog-2.0.8-py3-none-win\_arm64.whl

PEP 740 attestation verified (GitHub, Daniel-Knights/changenog, workflow release.yml).

- [changenog-2.0.8.dist-info/sboms/changenog.cyclonedx.json](https://pypi.sbomify.com/artifact/4fb64394-22cc-5942-9308-5ba87f4f9d95/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/changenog@2.0.8
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/changenog/2.0.8.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/changenog/2.0.8