# SBOM for libui 0.2.2

> Python bindings for libui-ng

The Python package libui 0.2.2 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/libui@0.2.2`
- PyPI: https://pypi.org/project/libui/0.2.2/
- License: MIT
- Requires Python: \>=3.10
- Documentation: <https://mosquito.github.io/libui-python/>
- Homepage: <https://github.com/mosquito/libui-python>
- Issues: <https://github.com/mosquito/libui-python/issues>
- Repository: <https://github.com/mosquito/libui-python>

## SBOMs

### libui-0.2.2-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, mosquito/libui-python, workflow release.yml).

- [libui-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d633e914-5b90-5d25-89c5-d1206e28143e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libui-0.2.2-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, mosquito/libui-python, workflow release.yml).

- [libui-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7dc1ae7e-f96d-5b71-861e-4ee1469b5448/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libui-0.2.2-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, mosquito/libui-python, workflow release.yml).

- [libui-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce39154a-2cee-5bd5-abeb-11a85d20f4a0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libui-0.2.2-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, mosquito/libui-python, workflow release.yml).

- [libui-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f6d2e3cd-aa22-5a7b-ab43-d50654f03d7a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libui-0.2.2-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, mosquito/libui-python, workflow release.yml).

- [libui-0.2.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/449e5478-bc4b-5a38-aa1b-61679df4e6c9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/libui@0.2.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/libui/0.2.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/libui/0.2.2