# SBOM for legate 26.6.1 > legate - The Foundation for All Legate Libraries The Python package legate 26.6.1 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/legate@26.6.1` - PyPI: https://pypi.org/project/legate/26.6.1/ - Author: NVIDIA Corporation - License: Apache-2.0 - Requires Python: \>=3.11 - homepage: ## SBOMs ### legate-26.6.1-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, nv-legate/legate.internal, workflow release-wheels.yml). - [legate-26.6.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2f8551c9-e313-5d49-8c9b-7546fed63711/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### legate-26.6.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, nv-legate/legate.internal, workflow release-wheels.yml). - [legate-26.6.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2b4cf10c-9d30-5a02-9b01-8c4a04a50dd8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### legate-26.6.1-cp312-cp312-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, nv-legate/legate.internal, workflow release-wheels.yml). - [legate-26.6.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7b08aff8-2dd8-54b4-adc8-067e130f054f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### legate-26.6.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, nv-legate/legate.internal, workflow release-wheels.yml). - [legate-26.6.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/06030d88-0989-5e9a-8c02-3bf0e6e27b77/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### legate-26.6.1-cp313-cp313-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, nv-legate/legate.internal, workflow release-wheels.yml). - [legate-26.6.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/31b974f8-62f9-5363-8d87-5d99fc1d4148/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### legate-26.6.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, nv-legate/legate.internal, workflow release-wheels.yml). - [legate-26.6.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c031a6a0-935b-560c-bbb8-5c9574d36a3c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### legate-26.6.1-cp314-cp314-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, nv-legate/legate.internal, workflow release-wheels.yml). - [legate-26.6.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/939dfef9-d9c0-5919-b354-b10d6f3ba8bb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### legate-26.6.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, nv-legate/legate.internal, workflow release-wheels.yml). - [legate-26.6.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/39237903-5787-58df-967a-12e229cbe864/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/legate@26.6.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/legate/26.6.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/legate/26.6.1