# SBOM for cyvcf2 0.35.0 > fast vcf parsing with cython + htslib The Python package cyvcf2 0.35.0 ships 23 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/cyvcf2@0.35.0` - PyPI: https://pypi.org/project/cyvcf2/0.35.0/ - License: MIT - Requires Python: \>=3.9 - Documentation: - Homepage: ## SBOMs ### cyvcf2-0.35.0-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/daf72a92-dca8-5303-bcf2-148535442730/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/041dad21-b797-58c7-903a-302e3637df81/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7dd879a2-ab70-57a4-9430-b19e3f8f10ce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5fe03112-43ce-5186-963b-f285ad26cfaa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1ad0b4af-19c7-5f6b-9cd0-445baa646611/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/571d22e5-a548-5b05-a399-bba4613acbab/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/726157ed-5fbb-560c-8a42-f0bbb8cee76e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c3566a45-fb79-5cd0-9992-b9bdd33590bf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/faee8c40-bb8a-5d39-8f9e-ece4ea530b31/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7f0e5ac5-7146-5e9d-8fdd-014d9a8d40b2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2561f445-653d-5b13-9e61-e8965c2a4b47/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5a0875b0-5fcf-58d2-8010-8d041e81caf2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2c7de4a1-4899-5bd8-9a14-8bc15e1adfea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b3abe793-3749-5394-8842-6a7449456ba1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3e8f85e4-9c12-5670-9f2f-1133dae7111f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/580bd7bc-dfdd-5cc6-acb6-e00c977874de/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5b7bd3d6-124f-5993-b7a0-34e1c9725313/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e703f7c4-2cac-5baf-ba57-f8935e651eea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4210dfe8-7a22-5520-982f-88b0883b2871/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp39-cp39-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3b34910b-4e77-57b7-a79b-d3126f6320a2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dace77b2-1925-5180-be50-783e2998da46/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b78f56e0-974f-5de3-990c-7c2c971237db/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### cyvcf2-0.35.0-pp311-pypy311\_pp73-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl - [cyvcf2-0.35.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/70106d0d-e715-5898-8138-c5525b512648/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/cyvcf2@0.35.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/cyvcf2/0.35.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/cyvcf2/0.35.0