# SBOM for libzim 3.9.0

> A python-facing API for creating and interacting with ZIM files

The Python package libzim 3.9.0 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/libzim@3.9.0`
- PyPI: https://pypi.org/project/libzim/3.9.0/
- Requires Python: \<3.15,\>=3.10
- Donate: <https://www.kiwix.org/en/support-us/>
- Homepage: <https://github.com/openzim/python-libzim>

## SBOMs

### libzim-3.9.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/99708b1f-a9ff-5452-9290-4bba5b43ab3e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/db1a323c-8043-5460-a68b-8ec041604227/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/412a3e02-d070-598d-9954-9fc46df7f126/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/52756b95-a1d4-5c92-ad47-d8b38fa976c9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2913e58f-ad0c-5835-b30b-df9417f039c7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/69f4cd46-3736-5e65-89dd-cb3762189fe7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f9460d14-b6e1-5b7d-8bfe-be70ac693344/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1b829a7f-cb2c-5acc-af6d-6cfcfcce5f56/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/841914a4-99cd-57da-a09d-38941d9a06ae/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce7a8a68-66ef-5185-bf12-05380d86d266/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fc7f74d6-9709-5e73-9bd2-bec64783b920/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### libzim-3.9.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

- [libzim-3.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a9a48feb-7e04-5e8d-933a-96598bb3f6e3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/libzim@3.9.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/libzim/3.9.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/libzim/3.9.0