# SBOM for libtfr 2.2.0 > Calculate multi-taper windowed and time-frequency reassignment spectrograms The Python package libtfr 2.2.0 ships 22 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/libtfr@2.2.0` - PyPI: https://pypi.org/project/libtfr/2.2.0/ - Requires Python: \>=3.10 - homepage: ## SBOMs ### libtfr-2.2.0-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bdfd4dbc-9d93-524b-a7ba-381ec228e758/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3fe36646-fd2a-5a93-ac2d-d68a2d4f54e1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3157a2b9-1b30-5d31-a6de-7b0c4404ce1b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d0e4da33-fa6d-5aec-9734-fa027e25dfa4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e6d6408f-f5bd-52f5-9d60-b1f7cba4b545/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a8e01b2c-e44e-5e76-a034-a9678020802a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/01cb6f74-f2d3-5905-97bb-a68fb3d2ab88/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/95a3e052-8e8c-518f-a6a0-2c647ce84257/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3fa51416-a182-55af-bb0a-7c17cc74d758/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e96f4ee5-e89b-5c7f-811a-6cbb7e0558d1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce97ac55-5645-5891-9700-01cbef51e2c8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/da02477d-8ed9-5a39-809a-11600473a443/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/448ff6d2-eee1-5708-8c83-04c9ad854d70/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0dc3a05c-2778-53f7-9fd8-4f885a0d6a63/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8d2249ba-212d-534f-89f0-665a04be2e11/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/41bea664-a7b5-5ba3-8600-eff379cb8c8f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/469e6d3b-cb14-513d-a6f6-d97cf23363de/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d8daab11-ac71-5ac7-bd31-47bf8525862e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2dc81a08-57d7-5ef9-891a-d1926d4333dc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1604db4f-2ed9-5df3-96d2-9a602cb6bae0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-pp311-pypy311\_pp73-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/366d7495-ffe1-5d0e-8d18-c6c8d0c09ef5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### libtfr-2.2.0-pp311-pypy311\_pp73-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, melizalab/libtfr, workflow build\_wheels.yml). - [libtfr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/abec8f80-f7be-5ea2-ac1e-d3d57b524fea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/libtfr@2.2.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/libtfr/2.2.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/libtfr/2.2.0