# SBOM for geddes 1.0.2 > A Python library for parsing XRD pattern files The Python package geddes 1.0.2 ships 15 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/geddes@1.0.2` - PyPI: https://pypi.org/project/geddes/1.0.2/ - License: MIT - Requires Python: \>=3.10 - Documentation: - Repository: ## SBOMs ### geddes-1.0.2-cp310-cp310-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/15697212-93fe-5ea3-83e2-1874ea76518a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp310-cp310-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/95683067-ea99-5926-993a-3a5b2556b5ae/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/0eb72ac9-94d9-59f2-8b44-b52f46610f4f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/3fd7e943-a542-5181-864e-527ed3239a75/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/91c5d8e0-c3f8-531c-a037-e0b7a87ab01a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/57b59705-1bf4-573d-92bc-bb551332f98b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/847f4363-1973-5ccb-a45b-ab38e46e67f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/0d9e2afd-fabe-5b32-93f3-b1dec3579d70/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/841f9ac0-e5a6-5f72-b117-a37b08efcb1f/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/03460631-2c85-5d8f-a5a6-d6e834608fcc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/f4879490-670e-5161-a2e6-45fba888a5d8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/bbdcdaf3-5435-5005-8a16-1e77e1e39660/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/bb9a1e60-7152-573a-b0aa-648cf2a70be6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp314-cp314-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/1cdf63a3-8ce0-5879-b5d6-3c6b5c801a78/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geddes-1.0.2-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, jcwang587/geddes, workflow publish-pypi.yml). - [geddes-1.0.2.dist-info/sboms/geddes.cyclonedx.json](https://pypi.sbomify.com/artifact/6d5ab942-8b8e-5214-9eb4-c4285df5688e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/geddes@1.0.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/geddes/1.0.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/geddes/1.0.2