SBOM for matplotlib 3.11.2

Python plotting package

CycloneDX PEP 740 attested No known vulnerabilities

Package information

Author
John D. Hunter, Michael Droettboom
License
License agreement for matplotlib versions 1.3.0 and later ========================================================= 1. This LICENSE AGREEMENT is between the Matplotlib Development Team ("MDT"), and the Individual or Organization ("Licensee") accessing and otherwise using matplotlib software in source or binary form and its associated documentation. 2. Subject to the terms and conditions of this License Agreement, MDT hereby grants Licensee a nonexclusive, royalty-free, world-wide license to reproduce, analyze, test, perform and/or display publicly, prepare derivative works, distribute, and otherwise use matplotlib alone or in any derivative version, provided, however, that MDT's License Agreement and MDT's notice of copyright, i.e., "Copyright (c) 2012- Matplotlib Development Team; All Rights Reserved" are retained in matplotlib alone or in any derivative version prepared by Licensee. 3. In the event Licensee prepares a derivative work that is based on or incorporates matplotlib or any part thereof, and wants to make the derivative work available to others as provided herein, then Licensee hereby agrees to include in any such work a brief summary of the changes made to matplotlib . 4. MDT is making matplotlib available to Licensee on an "AS IS" basis. MDT MAKES NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED. BY WAY OF EXAMPLE, BUT NOT LIMITATION, MDT MAKES NO AND DISCLAIMS ANY REPRESENTATION OR WARRANTY OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE OR THAT THE USE OF MATPLOTLIB WILL NOT INFRINGE ANY THIRD PARTY RIGHTS. 5. MDT SHALL NOT BE LIABLE TO LICENSEE OR ANY OTHER USERS OF MATPLOTLIB FOR ANY INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES OR LOS…
Requires Python
>=3.11
PyPI
matplotlib 3.11.2
Bug Tracker
https://github.com/matplotlib/matplotlib/issues
Documentation
https://matplotlib.org
Donate
https://numfocus.org/donate-to-matplotlib
Download
https://matplotlib.org/stable/install/index.html
Forum
https://discourse.matplotlib.org/
Homepage
https://matplotlib.org
Source Code
https://github.com/matplotlib/matplotlib

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

matplotlib-3.11.2-cp311-cp311-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: matplotlib/matplotlib-release Workflow: wheels.yml Environment: pypi
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

matplotlib-3.11.2-cp312-cp312-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: matplotlib/matplotlib-release Workflow: wheels.yml Environment: pypi
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

matplotlib-3.11.2-cp313-cp313-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: matplotlib/matplotlib-release Workflow: wheels.yml Environment: pypi
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

matplotlib-3.11.2-cp314-cp314-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: matplotlib/matplotlib-release Workflow: wheels.yml Environment: pypi
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

matplotlib-3.11.2-cp314-cp314t-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: matplotlib/matplotlib-release Workflow: wheels.yml Environment: pypi
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

matplotlib-3.11.2-cp315-cp315-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: matplotlib/matplotlib-release Workflow: wheels.yml Environment: pypi
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

matplotlib-3.11.2-cp315-cp315t-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: matplotlib/matplotlib-release Workflow: wheels.yml Environment: pypi
Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json no known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]