# SBOM for highspy 1.15.1 > A thin set of pybind11 wrappers to HiGHS The Python package highspy 1.15.1 ships 18 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/highspy@1.15.1` - PyPI: https://pypi.org/project/highspy/1.15.1/ - Requires Python: \>=3.9 - Bug Tracker: - Source Code: ## SBOMs ### highspy-1.15.1-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bed3c6af-320b-5581-a00f-2b77449c7f36/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp310-cp310-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/84c65271-382c-5496-bc50-84cdf0e2fbb2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f6dd7b9d-e413-57ed-abcd-e6f481f0f6dd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1ba3bb6c-e8d9-53a8-a1ba-08b66ec0da79/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp311-cp311-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/38ba4845-9c17-50e9-983f-df58f3e8407e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/edb76078-f33c-5f1a-81cb-2b1b021b8dd2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/53163ef0-7014-51ec-bab1-5a558dae1c7e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp312-cp312-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7d54f6b7-1da4-5faa-a257-110a81cb9d42/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9efbf7f1-302f-5b7d-8cfc-d642a83aff2c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2e11fc07-8988-5428-ba65-a45dc09eceaa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp313-cp313-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d9550cd4-6a04-5e11-b454-1281045c8f77/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/47768e50-65cb-504e-a90f-c54fcbd410f5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7e6f5626-e7ed-54b8-b5c8-a3994ba0aeb7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp314-cp314-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4527d91b-a2fe-50ec-9ce2-56bf1e4f63e2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7bb467e8-c1ca-5a7e-bf50-9534424c315f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a2dd23ec-8f29-501a-a5de-23bfa1bb2306/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp39-cp39-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/688caec6-5d3e-572f-83cf-c6d1d4ea63fa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### highspy-1.15.1-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, ERGO-Code/HiGHS, workflow build-wheels-push.yml). - [highspy-1.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/82adab47-abd7-5375-bfb2-0d7a025a3aa1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/highspy@1.15.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/highspy/1.15.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/highspy/1.15.1