# SBOM for fitsio 1.4.2

> A full featured python library to read from and write to FITS files.

The Python package fitsio 1.4.2 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/fitsio@1.4.2`
- PyPI: https://pypi.org/project/fitsio/1.4.2/
- Requires Python: \>=3.10
- home: <https://github.com/esheldon/fitsio>

## SBOMs

### fitsio-1.4.2-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/26c0c3ee-6c40-5a06-b72f-93cd4442d556/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/13185efd-afe1-581a-a29c-9b5db6a20018/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/27492e27-f88f-5d14-bcb2-9e4952d8030b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/73001b9c-4d09-50f8-9113-c4d93346d89e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/93f64b64-dae7-562f-9ea5-00b844b02949/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/872cc57e-68c6-5b3a-9cec-7b9b792a7b02/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/aed74914-51da-5012-89dd-0001a338fb76/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ad30eef6-9ca2-5715-b18f-440108574579/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ea35b6d8-6f98-517a-a28a-a46ecd105d1f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cbcf96bf-c5fd-5a14-a4ab-ccb00f4331ce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/72894060-c0a2-5366-9056-a4edbfdedec4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### fitsio-1.4.2-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

- [fitsio-1.4.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f0aa35dd-5eae-5a15-b19f-e13835253d80/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/fitsio@1.4.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/fitsio/1.4.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/fitsio/1.4.2