# SBOM for hydro-smash 1.3.0

> An open-source Python library interfacing the Fortran Spatially distributed Modeling and ASsimilation for Hydrology platform.

The Python package hydro-smash 1.3.0 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/hydro-smash@1.3.0`
- PyPI: https://pypi.org/project/hydro-smash/1.3.0/
- License: GPL-3.0
- Requires Python: \<3.14,\>=3.10
- documentation: <https://smash.recover.inrae.fr>
- repository: <https://github.com/DassHydro/smash>

## SBOMs

### hydro\_smash-1.3.0-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [hydro\_smash-1.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/967622db-206e-5940-8aaa-5ac7ce8ceb5c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hydro\_smash-1.3.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [hydro\_smash-1.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b10f5956-cbd3-5af7-923f-7ea431b7e1b0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hydro\_smash-1.3.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [hydro\_smash-1.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/590e7b8f-e797-5f9b-b327-367f8056d093/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### hydro\_smash-1.3.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [hydro\_smash-1.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/81ced779-3d9e-575e-8342-f129e633f885/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/hydro-smash@1.3.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/hydro-smash/1.3.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/hydro-smash/1.3.0