# SBOM for deme 3.0.19

> Python bindings for DEM-Engine - a GPU-accelerated Discrete Element Method simulation engine

The Python package deme 3.0.19 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/deme@3.0.19`
- PyPI: https://pypi.org/project/deme/3.0.19/
- License: BSD-3-Clause
- Requires Python: \>=3.9
- Documentation: <https://github.com/projectchrono/DEM-Engine>
- Homepage: <https://github.com/projectchrono/DEM-Engine>
- Repository: <https://github.com/projectchrono/DEM-Engine>

## SBOMs

### deme-3.0.19-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, projectchrono/DEM-Engine, workflow python-wheels.yml).

- [deme-3.0.19.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a4627806-5a01-5932-b4c8-0b123699decb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### deme-3.0.19-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, projectchrono/DEM-Engine, workflow python-wheels.yml).

- [deme-3.0.19.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3abbbfd5-b7fd-52ef-8ea0-874cb141c382/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### deme-3.0.19-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, projectchrono/DEM-Engine, workflow python-wheels.yml).

- [deme-3.0.19.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/199aecf3-3bf5-5968-ad12-18b8c170e410/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### deme-3.0.19-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, projectchrono/DEM-Engine, workflow python-wheels.yml).

- [deme-3.0.19.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8e3ce855-ac97-596a-9ac0-45022c4d9778/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### deme-3.0.19-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, projectchrono/DEM-Engine, workflow python-wheels.yml).

- [deme-3.0.19.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/12932821-b0a8-5b2e-bd40-1024d864ba8a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### deme-3.0.19-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, projectchrono/DEM-Engine, workflow python-wheels.yml).

- [deme-3.0.19.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0db99c12-08b3-5f4b-8304-1a5b39ff8736/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/deme@3.0.19
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/deme/3.0.19.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/deme/3.0.19