# SBOM for compas-cra 0.8.0 The Python package compas-cra 0.8.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/compas-cra@0.8.0` - PyPI: https://pypi.org/project/compas-cra/0.8.0/ - License: MIT License Copyright (c) 2020 - 2022 ETH Zurich, Block Research Group, Gene Ting-Chun Kao Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated… - Requires Python: \>=3.9 - Changelog: - Documentation: - Homepage: - Repository: ## SBOMs ### compas\_cra-0.8.0-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d12ed788-e7fa-56ea-a02e-c26007162aad/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### compas\_cra-0.8.0-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/04babf4f-4f05-51f1-bcac-285b6837a312/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### compas\_cra-0.8.0-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/71680cd0-8da4-5c29-b3fb-207467c312ac/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### compas\_cra-0.8.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7a769a94-7aca-586b-8a2e-13e8b836fa30/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### compas\_cra-0.8.0-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/529ae90e-fdf7-505a-9675-db9eec9c5015/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### compas\_cra-0.8.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/543341b7-324d-56c7-9b23-e864efcbea72/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### compas\_cra-0.8.0-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c40c3af1-bfec-5218-866a-8bf7854d5f3b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### compas\_cra-0.8.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/108a02f7-1a4b-5626-b0d3-5c15e7a45daa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### compas\_cra-0.8.0-cp39-cp39-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a31da702-790c-5a91-941c-47646f67c03b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### compas\_cra-0.8.0-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, BlockResearchGroup/compas\_cra, workflow release.yml). - [compas\_cra-0.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3315c57f-cf21-5870-8dfa-22c18c12b430/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/compas-cra@0.8.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/compas-cra/0.8.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/compas-cra/0.8.0