# SBOM for lco-banzai 1.40.0

> Python data reduction package for LCOGT data

The Python package lco-banzai 1.40.0 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/lco-banzai@1.40.0`
- PyPI: https://pypi.org/project/lco-banzai/1.40.0/
- Author: Curtis McCully
- Requires Python: \<4,\>=3.11
- Docs: <https://banzai.readthedocs.io/en/latest/>
- Homepage: <http://github.com/lcogt/banzai>
- Source: <https://github.com/lcogt/banzai>

## SBOMs

### lco\_banzai-1.40.0-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9bec99b0-3f13-54d3-bdc3-0f23019ea25a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f6ab131e-8ed0-539f-9fba-1a40b39468b9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/04169b81-43a2-5266-9060-c75ddfc13c9d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/35a402f2-7ec6-5e36-8d1a-79d02181d625/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d0e31937-a63d-55e2-b50f-7e279772df82/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/18b3ebe6-d575-5ef0-9df7-1f7134482fd3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp314-cp314-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3b73409f-9876-59e0-ac5a-c6bff114cb31/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/895aa446-7669-5d4d-bc37-ba79d227b161/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp314-cp314t-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ed8d4297-b756-51a6-ae5e-f52cb15fa19a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f8d85d77-1d1b-56c8-9633-121976f6ed10/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp315-cp315-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0333db59-fa71-5a87-b11d-248d010922a1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ed1d14c5-4391-5f06-b809-ba3e040c7a39/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp315-cp315t-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce634e3b-95b9-5d96-8c82-d9966b05645f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### lco\_banzai-1.40.0-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, LCOGT/banzai, workflow pypi-release.yml).

- [lco\_banzai-1.40.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b103d314-e8f3-568c-8492-e230fd3901b7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/lco-banzai@1.40.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/lco-banzai/1.40.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/lco-banzai/1.40.0