# SBOM for heavykeeper 0.2.5 > Python bindings for the HeavyKeeper algorithm implemented in Rust The Python package heavykeeper 0.2.5 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/heavykeeper@0.2.5` - PyPI: https://pypi.org/project/heavykeeper/0.2.5/ - Author: Patrick McGleenon - License: MIT - Requires Python: \>=3.11 - Bug Reports: - Homepage: - Repository: - Source: ## SBOMs ### heavykeeper-0.2.5-cp311-cp311-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/a188b494-f094-5294-acd7-c3dc64074a34/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp311-cp311-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/b8832553-db2e-53db-9eb3-d5a89f664bcb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/60422fb4-3305-5c33-aed8-b872fc2304a3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/36bdcd7d-19d2-5e5c-83d8-7ad98bdede71/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp312-cp312-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/8d350eba-40f1-581f-a815-3d56940c36b8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp312-cp312-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/5ff7c63b-04c8-5de6-afa9-8a4fc6cd2c36/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/0706949b-d822-5d9e-8e2c-d039d541ea90/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/27db000a-ceb2-5048-aa6b-3dd85d6cb87d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp313-cp313-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/055c5dc3-123c-5dc0-a5fe-287d8b88dcd9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp313-cp313-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/858b8403-cb69-552a-a7a3-11807c844d6c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/48bfa61a-5941-5bb7-bc6a-444bb1ec824e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/7c03f1ce-07d1-5d5e-bee9-318bdce7aee9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp314-cp314-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/bf502f9f-d35a-5eb8-9b1f-932d9741b77b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp314-cp314-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/774d349e-149e-5f72-9402-7b4be256d0ca/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/e1a7614d-d8d9-5012-bb35-5c36de3064e4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### heavykeeper-0.2.5-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, pmcgleenon/heavykeeper-py, workflow release.yml). - [heavykeeper-0.2.5.dist-info/sboms/heavykeeper.cyclonedx.json](https://pypi.sbomify.com/artifact/a408ee05-8849-5033-b2c8-ac2a54d3d4eb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/heavykeeper@0.2.5 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/heavykeeper/0.2.5.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/heavykeeper/0.2.5