# SBOM for glq 0.8.35

> Lattice and trellis-coded quantization for LLM weights (2-8 bpw)

The Python package glq 0.8.35 ships 3 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/glq@0.8.35`
- PyPI: https://pypi.org/project/glq/0.8.35/
- Requires Python: \>=3.12

## SBOMs

### glq-0.8.35-cp312-cp312-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, cnygaard/glq, workflow publish.yml).

- [glq-0.8.35.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8caf4b84-1a2e-5337-8a16-ce71d1894908/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### glq-0.8.35-cp313-cp313-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, cnygaard/glq, workflow publish.yml).

- [glq-0.8.35.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b9f8edea-47f8-55ac-97f4-d69cf52fd6fd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### glq-0.8.35-cp314-cp314-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, cnygaard/glq, workflow publish.yml).

- [glq-0.8.35.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/01c4ce3f-51a2-581b-bec5-5bcef3559bb1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/glq@0.8.35
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/glq/0.8.35.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/glq/0.8.35