# SBOM for jaq-bin 3.1.2

> A jq clone focused on correctness, speed, and simplicity

The Python package jaq-bin 3.1.2 ships 7 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/jaq-bin@3.1.2`
- PyPI: https://pypi.org/project/jaq-bin/3.1.2/
- Requires Python: \>=3.7
- jaq: <https://github.com/01mf02/jaq>
- repository: <https://github.com/Bing-su/pip-binary-factory>

## SBOMs

### jaq\_bin-3.1.2-py3-none-macosx\_10\_12\_x86\_64.whl

PEP 740 attestation verified (GitHub, Bing-su/pip-binary-factory, workflow build\_jaq.yml).

- [jaq\_bin-3.1.2.dist-info/sboms/jaq.cyclonedx.json](https://pypi.sbomify.com/artifact/4655be78-3702-58d1-b259-0f4860409a42/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### jaq\_bin-3.1.2-py3-none-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, Bing-su/pip-binary-factory, workflow build\_jaq.yml).

- [jaq\_bin-3.1.2.dist-info/sboms/jaq.cyclonedx.json](https://pypi.sbomify.com/artifact/9f4f0a2f-41e3-5d85-a678-8ddd44e20772/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### jaq\_bin-3.1.2-py3-none-manylinux\_2\_28\_aarch64.musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, Bing-su/pip-binary-factory, workflow build\_jaq.yml).

- [jaq\_bin-3.1.2.dist-info/sboms/jaq.cyclonedx.json](https://pypi.sbomify.com/artifact/6ec20943-2ca2-50cd-854c-c5f14d1a578d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### jaq\_bin-3.1.2-py3-none-manylinux\_2\_28\_x86\_64.musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, Bing-su/pip-binary-factory, workflow build\_jaq.yml).

- [jaq\_bin-3.1.2.dist-info/sboms/jaq.cyclonedx.json](https://pypi.sbomify.com/artifact/07170943-24be-51c3-aa30-2688e0d52c2e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### jaq\_bin-3.1.2-py3-none-manylinux\_2\_31\_riscv64.musllinux\_1\_2\_riscv64.whl

PEP 740 attestation verified (GitHub, Bing-su/pip-binary-factory, workflow build\_jaq.yml).

- [jaq\_bin-3.1.2.dist-info/sboms/jaq.cyclonedx.json](https://pypi.sbomify.com/artifact/b3875198-cd14-59e7-b10a-017cf62f66c4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### jaq\_bin-3.1.2-py3-none-win\_amd64.whl

PEP 740 attestation verified (GitHub, Bing-su/pip-binary-factory, workflow build\_jaq.yml).

- [jaq\_bin-3.1.2.dist-info/sboms/jaq.cyclonedx.json](https://pypi.sbomify.com/artifact/d94492cb-d3ae-5730-95e1-00e15235e017/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### jaq\_bin-3.1.2-py3-none-win\_arm64.whl

PEP 740 attestation verified (GitHub, Bing-su/pip-binary-factory, workflow build\_jaq.yml).

- [jaq\_bin-3.1.2.dist-info/sboms/jaq.cyclonedx.json](https://pypi.sbomify.com/artifact/6903fad3-8d3f-5d9f-a3dc-241e2a42d228/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/jaq-bin@3.1.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/jaq-bin/3.1.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/jaq-bin/3.1.2