# SBOM for libggml-python 0.20.2.post1 > Prebuilt ggml libraries The Python package libggml-python 0.20.2.post1 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/libggml-python@0.20.2.post1` - PyPI: https://pypi.org/project/libggml-python/0.20.2.post1/ - Author: benniekiss - Requires Python: \>=3.10 - Source: - Tracker: - Upstream: ## SBOMs ### libggml\_python-0.20.2.post1-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0a4de31b-7223-512a-8fff-cb9e986a21ea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b66fbef0-4000-5c74-869c-f8bd0dbb95d3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/eb36fcf6-b2b6-575a-a04f-1a3b7152202c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7f7aba3e-757f-5917-b323-72c58e204b7e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ab5013f7-c0c2-5471-89b1-fe729f710be0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ed5487a8-a633-5735-a13a-cd1ffd6780cf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/96b12ce7-cd67-584a-976e-10f06ee52893/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/09304c1b-506c-51a3-9fc3-a6bd16d9bad6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/164a4fc5-0ae9-5ccd-acc3-a0839f0803a8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2e3a2e81-64f8-5f86-90ac-7bc63861cfb8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8541e1ef-7629-51ef-b26f-b889e11d0660/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/55db141e-c0a3-542f-bfd0-04dd677143bf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4a68874a-71d2-55ab-b331-3605740fc136/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f692f63e-3a1c-5a85-bdaa-3124837577e8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b8428b00-afef-5c48-ab69-3a8ded83c5fc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libggml\_python-0.20.2.post1-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, benniekiss/libggml-python, workflow build-publish.yaml). - [libggml\_python-0.20.2.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ed17dc6c-0a60-54ac-832c-1f5e4897308a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/libggml-python@0.20.2.post1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/libggml-python/0.20.2.post1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/libggml-python/0.20.2.post1