# SBOM for citiespy 0.6.14 > Cities. The Python package citiespy 0.6.14 ships 22 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/citiespy@0.6.14` - PyPI: https://pypi.org/project/citiespy/0.6.14/ - Requires Python: \>=3.10 - Documentation: - Issues: - Source Code: ## SBOMs ### citiespy-0.6.14-cp310-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/7fe372cb-106f-54e9-8544-90baf63541a0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/c725b5c1-e6d4-5f77-984f-411d1aef82f2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/db762743-5dc4-577b-969b-f28e5d4f2179/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/6bd2c789-c7d3-5828-90b7-ad0fea27ede8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/5b039f6c-4221-581b-b2eb-3c834d55ecb7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-manylinux\_2\_34\_riscv64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/0150d4f1-e86b-5454-91ee-0a90f9a6af36/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/2247939a-e004-5062-a9b0-e9e18e54f7c4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/18fd6ddc-4470-5ae4-a2d8-6457954e61f2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/b15f50c4-a38f-54a1-b39c-69ff16874d42/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/55713ed9-6399-5894-937c-10e1ab7a9e3e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp310-abi3-win\_arm64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/f992e897-6aa4-561e-9f01-a33bee2c0277/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/1b04f654-89ad-5fe1-83d8-7f437cf80eb0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/eb377f1b-290d-57dc-af8f-fa4f9ea2fa2c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/2e3c4b42-cae1-5f38-882f-3bd0edfdedbc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/e24775f0-cccb-5c5d-9c69-494a67e6562f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/01a2d8f7-d192-5cad-b320-58b6425038c5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-manylinux\_2\_34\_riscv64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/918bddd6-b401-5045-abd3-7f09ca6c940e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/b927bbad-698e-5152-a1a7-8e12c3bcf322/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/9d01f014-5ba1-53a8-9458-c11fd1686189/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/dc39a7e1-e402-51e3-af2e-5e11a508e9aa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-win\_amd64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/0530b6a3-fb12-5a22-a92a-d76acc2ebe60/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### citiespy-0.6.14-cp314-cp314t-win\_arm64.whl PEP 740 attestation verified (GitHub, ringsaturn/go-cities.json, workflow release-python.yml). - [citiespy-0.6.14.dist-info/sboms/citiespy.cyclonedx.json](https://pypi.sbomify.com/artifact/5d5e2aa4-47cb-5aef-86d3-9c897d4026b3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/citiespy@0.6.14 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/citiespy/0.6.14.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/citiespy/0.6.14