# SBOM for iminuit 2.33.0 > Jupyter-friendly Python frontend for MINUIT2 in C++ The Python package iminuit 2.33.0 ships 17 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/iminuit@2.33.0` - PyPI: https://pypi.org/project/iminuit/2.33.0/ - Requires Python: \>=3.9 - documentation: - repository: ## SBOMs ### iminuit-2.33.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2ee097fc-18ae-5f8d-8db7-02da690ceaf1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/192fad6c-81c7-5b8f-8997-87550668e85d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/391aece6-1996-55c2-8959-1c5bd5742742/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bf04fc38-8580-5c34-9649-94bf5db51911/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/67e8bcbc-26c2-5bab-ade4-2b6308183aa6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cc60d40c-0c3e-54cd-bdbf-33fe8d5bbd38/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/31572847-f9e3-580c-8b2f-939cbf4e6f2f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8952af9a-e4c2-5036-9ad1-8961b27cd162/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bc8f53c9-0dc6-58f8-b9f8-1c1c568714da/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/63ec82b2-3461-5c3c-a38f-39065baa7c11/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3f65c390-69cd-52c7-a383-7cba5701bd4a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0ef8443c-fc5e-523b-95ca-92ef420fda08/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/73074a90-5955-5ee9-9a8c-c276318c4e2f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1ee700da-2342-5fe4-b995-4db443ddd760/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/60ceca8a-71e3-52df-b116-b0f12251f214/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/facb2b66-c276-5b4d-b5f9-e9cd66709a40/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### iminuit-2.33.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, scikit-hep/iminuit, workflow release.yml). - [iminuit-2.33.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e8f0eed1-4565-57c7-b3c3-fc015ef3541a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/iminuit@2.33.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/iminuit/2.33.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/iminuit/2.33.0