# SBOM for hdiffpatch 2.6.0 > Python wrapper around HDiffPatch C++ library for efficient binary diff/patch operations. The Python package hdiffpatch 2.6.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/hdiffpatch@2.6.0` - PyPI: https://pypi.org/project/hdiffpatch/2.6.0/ - Author: Brian Pugh - Requires Python: \>=3.10 - documentation: - homepage: - repository: ## SBOMs ### hdiffpatch-2.6.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2931bb2c-dec5-5fb3-8ef2-dc7880641743/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### hdiffpatch-2.6.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/aa27d95d-81e7-5561-aff7-7236e01c4829/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### hdiffpatch-2.6.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e38f18d9-4a6b-5fa9-b8a9-f9e444441283/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### hdiffpatch-2.6.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e288b418-386c-55b9-a73f-0c37f02bf80f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### hdiffpatch-2.6.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7aba44cf-eaaa-52dc-a875-0c09c18ad8fe/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### hdiffpatch-2.6.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5769c287-d05c-5b9d-addf-89b36ea95bc7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### hdiffpatch-2.6.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fe2ecdc9-5735-5abe-a6db-bcfc5132941e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### hdiffpatch-2.6.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/47fd3e82-e985-565c-9871-8997379d063e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### hdiffpatch-2.6.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dc8cbf68-5b12-5dc8-8db3-019f5c9a2f84/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### hdiffpatch-2.6.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, BrianPugh/hdiffpatch-python, workflow build\_wheels.yaml). - [hdiffpatch-2.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5a534d25-19f7-51f1-9014-e769dcb08ada/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/hdiffpatch@2.6.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/hdiffpatch/2.6.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/hdiffpatch/2.6.0