# SBOM for dftd4 4.3.1 > Python API of the DFT-D4 project The Python package dftd4 4.3.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/dftd4@4.3.1` - PyPI: https://pypi.org/project/dftd4/4.3.1/ - License: LGPL-3.0-or-later - Requires Python: \>=3.7 - repository: ## SBOMs ### dftd4-4.3.1-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation failed verification: Failed to refresh TUF metadata. - [dftd4-4.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/65a82afe-3637-508d-8d2b-62a5e22396ab/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### dftd4-4.3.1-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, dftd4/dftd4, workflow wheel.yml). - [dftd4-4.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d459f619-1875-5056-ab27-6caab9d6940f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### dftd4-4.3.1-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, dftd4/dftd4, workflow wheel.yml). - [dftd4-4.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2eced26a-2b3d-5c38-afc4-2fc29cf58c26/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### dftd4-4.3.1-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, dftd4/dftd4, workflow wheel.yml). - [dftd4-4.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c73bf425-3ad5-59dc-ad6a-dde17d246cb8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### dftd4-4.3.1-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, dftd4/dftd4, workflow wheel.yml). - [dftd4-4.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/27971308-3434-5acf-b6c6-6a05f14469be/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### dftd4-4.3.1-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, dftd4/dftd4, workflow wheel.yml). - [dftd4-4.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b1d64b44-e6be-598a-9692-7dbefcd2a81a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/dftd4@4.3.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/dftd4/4.3.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/dftd4/4.3.1