# SBOM for geoarrow-c 0.4.0 > Python bindings to the geoarrow C and C++ implementation The Python package geoarrow-c 0.4.0 ships 18 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/geoarrow-c@0.4.0` - PyPI: https://pypi.org/project/geoarrow-c/0.4.0/ - Requires Python: \>=3.9 - homepage: - repository: ## SBOMs ### geoarrow\_c-0.4.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1f02faf9-3093-5f18-a16d-722008bbb6f7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d3e39eea-a592-5aa5-be93-a83ad651dfd5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7eba24a1-2933-5a57-87ac-489b3d563d3e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a3602dbb-b0ca-5c5b-bf25-9a790e90116b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/42d30b63-2234-5a11-8628-485dffafb9a9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9d6a0e0d-e199-5b5e-aa66-e05510ecb8b2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fe6d4f19-12d0-55dc-b926-007ccd062309/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/82f27d46-122e-5eee-b35e-df2401840089/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9e3a856b-bacc-5eda-a81c-9ab11feeba28/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4c6bcb3e-3576-5fef-bd4c-a14c69ae27fe/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cdad60b0-fae6-5aa2-8a22-0ef3c41aa322/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c23dfe6e-12bb-5b80-9513-1404ab8e04f4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fafdf605-a121-508b-9ad3-5bbfa3008333/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9f1a7c0c-fefe-508b-9e5e-71e1182b027a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/11d3487d-599f-5a76-8c3e-73ef89384a24/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/faa7f52d-03ca-5cb0-9187-287813571c5c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/89220d22-b3cd-58db-abd9-c87148fdf1cb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### geoarrow\_c-0.4.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, geoarrow/geoarrow-c, workflow release.yaml). - [geoarrow\_c-0.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3bce1fff-1cf3-5ba9-8d13-004cdceb4392/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/geoarrow-c@0.4.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/geoarrow-c/0.4.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/geoarrow-c/0.4.0