# SBOM for galsim 2.8.5 > The modular galaxy image simulation toolkit The Python package galsim 2.8.5 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/galsim@2.8.5` - PyPI: https://pypi.org/project/galsim/2.8.5/ - Author: GalSim Developers (point of contact: Mike Jarvis) - License: BSD License - Download: - Homepage: ## SBOMs ### galsim-2.8.5-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c9949c1d-c9b5-5b44-9567-fb6078b04b23/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/35e301cd-6c69-5adc-a7dd-759eeb2828ea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0b276a3a-9779-560b-81de-3697f51f8ed1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/81c51cb6-b419-578d-8f02-12b29339e9a8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/18c4d576-3783-5191-9108-8eb59fe1802e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/64bd665f-8a76-506f-b4f4-84100318dbb0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c639ac94-8fa5-584e-b061-cf94f5b0fe22/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/110d33f8-d4bf-50b8-bdd4-c081808f09c2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f86d8d0f-aad6-55f9-a02b-9738b503d222/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cec2cf9f-1ad4-590d-a646-687af9715b48/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp314-cp314t-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/05f81dcd-c159-5dbe-af65-dba52a25f9c4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d0fa8869-7008-52ad-81cc-37ab2254efaf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6aa639ed-6970-5094-8ba9-0e33e40a9e78/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### galsim-2.8.5-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, GalSim-developers/GalSim, workflow wheels.yml). - [galsim-2.8.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ff0b63ad-28ed-55cd-8898-201d8e91edd4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/galsim@2.8.5 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/galsim/2.8.5.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/galsim/2.8.5