# SBOM for edgefirst-schemas 4.1.0 > Zero-copy CDR message types for EdgeFirst Perception (ROS 2 + Foxglove + custom) The Python package edgefirst-schemas 4.1.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/edgefirst-schemas@4.1.0` - PyPI: https://pypi.org/project/edgefirst-schemas/4.1.0/ - License: Apache-2.0 - Requires Python: \>=3.8 - Changelog: - Homepage: - Issues: - Repository: ## SBOMs ### edgefirst\_schemas-4.1.0-cp311-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/7b031c81-883c-5f5c-908f-573dcdde6175/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### edgefirst\_schemas-4.1.0-cp311-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/02cfe8ae-9509-5325-aa78-c053bb466950/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### edgefirst\_schemas-4.1.0-cp311-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/cbfb4761-81bc-5380-95ec-06496b26522c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### edgefirst\_schemas-4.1.0-cp311-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/8be595e6-0d50-57b3-86b9-71636f505c98/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### edgefirst\_schemas-4.1.0-cp311-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/9228456e-6da0-549f-890c-318cbc4db7cf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### edgefirst\_schemas-4.1.0-cp38-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/9c24f0b5-f3de-5f99-b481-055c543765b2/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### edgefirst\_schemas-4.1.0-cp38-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/d4920c89-015c-5cc9-a339-97d7a324e025/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### edgefirst\_schemas-4.1.0-cp38-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/91a28d15-1e7a-5906-b0f9-98ac6c8e0ddb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### edgefirst\_schemas-4.1.0-cp38-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/35f6578b-4032-5adf-908b-ff6a904ba67d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### edgefirst\_schemas-4.1.0-cp38-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, EdgeFirstAI/schemas, workflow release.yml). - [edgefirst\_schemas-4.1.0.dist-info/sboms/edgefirst-schemas-python.cyclonedx.json](https://pypi.sbomify.com/artifact/f00cd2a8-c974-51ff-88ec-48462063e15d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/edgefirst-schemas@4.1.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/edgefirst-schemas/4.1.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/edgefirst-schemas/4.1.0