# SBOM for kiwisolver 1.5.0

> A fast implementation of the Cassowary constraint solver

The Python package kiwisolver 1.5.0 ships 34 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/kiwisolver@1.5.0`
- PyPI: https://pypi.org/project/kiwisolver/1.5.0/
- License: ========================= The Kiwi licensing terms ========================= Kiwi is licensed under the terms of the Modified BSD License (also known as New or Revised BSD), as follows: Copyright (c)…
- Requires Python: \>=3.10
- changelog: <https://github.com/nucleic/kiwi/blob/main/releasenotes.rst>
- documentation: <https://kiwisolver.readthedocs.io/en/latest/>
- homepage: <https://github.com/nucleic/kiwi>
- repository: <https://github.com/nucleic/kiwi>

## SBOMs

### kiwisolver-1.5.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1e4651fb-5d05-515e-adf6-a4a16d7c923e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp310-cp310-musllinux\_1\_2\_ppc64le.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/249c162c-832d-5484-9418-06fb3b93827b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp310-cp310-musllinux\_1\_2\_s390x.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/eaa4ac82-0ccc-5907-9ddb-e61dbaec9db2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f687b9a1-7b7b-51fc-afc2-72d67f29c567/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/07d2c325-af47-508e-9597-6f5bdcae77ee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp311-cp311-musllinux\_1\_2\_ppc64le.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/35362d93-9d46-5cc5-bd46-9c64cb273233/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp311-cp311-musllinux\_1\_2\_riscv64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7b1dff3f-568a-5351-9cdb-222309748a6d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp311-cp311-musllinux\_1\_2\_s390x.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7180ca67-6dce-5fcc-bed8-e496ed70ad92/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e5e87634-b72f-5016-94f1-31f5b5df5bae/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/de5dac2b-a606-5137-96ae-a30d93c3f7ee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp312-cp312-musllinux\_1\_2\_ppc64le.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1d6f5e24-75b4-5e5e-a83f-2029c5d76ff6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp312-cp312-musllinux\_1\_2\_riscv64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/188c2d82-c289-515d-b28e-2c6e8b34e397/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp312-cp312-musllinux\_1\_2\_s390x.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/83569a85-51b1-505f-9cd7-00271e1a3d45/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/68c604ff-2038-5b77-8b2e-d577c7b07dbd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0b027b18-c6fd-51f3-a625-df244fe05821/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313-musllinux\_1\_2\_ppc64le.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/04fb036e-1566-5ec8-92dd-cd03ca31117b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313-musllinux\_1\_2\_riscv64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8700dd34-1d3e-5a5a-8e5e-622ba9b6d1ad/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313-musllinux\_1\_2\_s390x.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e1af90a0-b21d-5aaf-b18d-a52dfeac9193/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/27b67fec-5464-57b0-879d-57214d030f9a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/815213c7-2876-52ba-a66c-f4ff93ef273c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313t-musllinux\_1\_2\_ppc64le.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1dac6e37-b0e7-5edf-a6a5-9ffb563e4433/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313t-musllinux\_1\_2\_riscv64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4134a744-46d1-5211-b44d-3166c24c6633/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313t-musllinux\_1\_2\_s390x.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2617b2ee-40df-5d6a-ba15-236a860d59d9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp313-cp313t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bd162844-5493-5e0e-87b8-fff5d5fe471a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8153fe15-095d-59a6-9bab-83974ce6f3b5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314-musllinux\_1\_2\_ppc64le.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dff8f9aa-e6bf-53d9-a702-50b041be6ed9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314-musllinux\_1\_2\_riscv64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4b5c796d-807a-5fd4-be5e-74dc2d87d769/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314-musllinux\_1\_2\_s390x.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/18619373-fa43-5c14-af15-024b47d95e44/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/feed9216-9a49-5c78-9f3e-e1ab5ebd5880/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0755c18a-e523-5275-8d15-b96a5a01067f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314t-musllinux\_1\_2\_ppc64le.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9f2eb7de-76e9-571d-b829-dd6c0758ed71/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314t-musllinux\_1\_2\_riscv64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b7ebedbe-5efa-5045-8312-1e5206f68ad6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314t-musllinux\_1\_2\_s390x.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e29b9a31-2112-5bc5-861b-c17767926d70/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### kiwisolver-1.5.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, nucleic/kiwi, workflow release.yml).

- [kiwisolver-1.5.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f0a4f9e7-3d9f-5f1b-9082-b531242155d0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/kiwisolver@1.5.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/kiwisolver/1.5.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/kiwisolver/1.5.0