# SBOM for esi-core 1.2.9

> Repository for compiled code used by ESI projects.

The Python package esi-core 1.2.9 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/esi-core@1.2.9`
- PyPI: https://pypi.org/project/esi-core/1.2.9/
- License: License ======= Unless otherwise noted, This project is in the public domain in the United States because it contains materials that originally came from the United States Geological Survey, an agenc…
- Requires Python: \<3.14,\>=3.9

## SBOMs

### esi\_core-1.2.9-cp310-cp310-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b6ffe983-f617-5dd2-bc01-044f59ebca9b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### esi\_core-1.2.9-cp310-cp310-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cffafa8f-0c35-51fc-b0a1-150dfad9160e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### esi\_core-1.2.9-cp311-cp311-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/50a5ef34-262f-5887-807d-85cd9a7998f7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### esi\_core-1.2.9-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b58c4d72-350f-5c79-a5f6-b76e9710cbdb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### esi\_core-1.2.9-cp312-cp312-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dffab837-6f5f-5536-963e-8b7b6c55e571/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### esi\_core-1.2.9-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6f44222b-3648-5172-8b20-f6486218de09/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### esi\_core-1.2.9-cp313-cp313-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7415a742-e703-5cd3-b102-ce6a95a22e2c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### esi\_core-1.2.9-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bd06778b-13ce-550d-8334-7cc3fed650b0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### esi\_core-1.2.9-cp39-cp39-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/70e869d1-920c-50c3-b75f-d7ab39a5005b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### esi\_core-1.2.9-cp39-cp39-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, cbworden-usgs/esi-core, workflow release.yml).

- [esi\_core-1.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1e3d5e11-049b-5823-989b-bb804b1f9b0f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/esi-core@1.2.9
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/esi-core/1.2.9.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/esi-core/1.2.9