# SBOM for hapla 1.0.0

> Framework for haplotype clustering in phased genotype data

The Python package hapla 1.0.0 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/hapla@1.0.0`
- PyPI: https://pypi.org/project/hapla/1.0.0/
- Requires Python: \>=3.11
- Documentation: <https://github.com/Rosemeis/hapla#readme>
- Homepage: <https://github.com/Rosemeis/hapla>
- Issues: <https://github.com/Rosemeis/hapla/issues>
- Source: <https://github.com/Rosemeis/hapla>

## SBOMs

### hapla-1.0.0-cp311-cp311-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Rosemeis/hapla, workflow release.yml).

- [hapla-1.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7313d386-a4f8-5e25-9f8a-31afbcf783a9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hapla-1.0.0-cp311-cp311-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, Rosemeis/hapla, workflow release.yml).

- [hapla-1.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a5f54a21-a4a2-522c-8649-f7bc4b92c9ef/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hapla-1.0.0-cp312-cp312-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Rosemeis/hapla, workflow release.yml).

- [hapla-1.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2b3352d7-dee9-5d59-a225-3ce1fa35d799/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hapla-1.0.0-cp312-cp312-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, Rosemeis/hapla, workflow release.yml).

- [hapla-1.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4bc551d9-c0d9-519c-8046-8e77b8b98757/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hapla-1.0.0-cp313-cp313-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Rosemeis/hapla, workflow release.yml).

- [hapla-1.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0fe2451f-e52c-52ab-b154-1042b7163639/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hapla-1.0.0-cp313-cp313-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, Rosemeis/hapla, workflow release.yml).

- [hapla-1.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7d246d23-d1b7-5ed3-abbe-f5b114812431/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hapla-1.0.0-cp314-cp314-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Rosemeis/hapla, workflow release.yml).

- [hapla-1.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2a4a8688-3e12-519f-a3d4-26734605b6cd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hapla-1.0.0-cp314-cp314-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, Rosemeis/hapla, workflow release.yml).

- [hapla-1.0.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1c19b777-7186-57e2-a81d-87bbc0eff2e0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/hapla@1.0.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/hapla/1.0.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/hapla/1.0.0