# SBOM for liblathe 0.2.0

> Python library for generating lathe paths and gcode

The Python package liblathe 0.2.0 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/liblathe@0.2.0`
- PyPI: https://pypi.org/project/liblathe/0.2.0/
- Author: Daniel Wood
- License: GPL2
- Requires Python: \>=3.10
- Homepage: <https://github.com/dubstar-04/LibLathe>

## SBOMs

### liblathe-0.2.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, dubstar-04/LibLathe, workflow publish.yml).

- [liblathe-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ee7af876-e09a-55b8-aba1-ccca5f8666c9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### liblathe-0.2.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, dubstar-04/LibLathe, workflow publish.yml).

- [liblathe-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/81af34e8-6ecc-5106-bbe4-888e6ce8fec0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### liblathe-0.2.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, dubstar-04/LibLathe, workflow publish.yml).

- [liblathe-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b67a0c21-e60a-5671-a608-b07bac8df677/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### liblathe-0.2.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, dubstar-04/LibLathe, workflow publish.yml).

- [liblathe-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ece2560a-e509-59bb-b96d-f520520b91a4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### liblathe-0.2.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, dubstar-04/LibLathe, workflow publish.yml).

- [liblathe-0.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6a106920-7655-5fff-a9c1-3ec727391582/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/liblathe@0.2.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/liblathe/0.2.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/liblathe/0.2.0