# SBOM for matplotlib 3.11.2 > Python plotting package The Python package matplotlib 3.11.2 ships 7 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/matplotlib@3.11.2` - PyPI: https://pypi.org/project/matplotlib/3.11.2/ - Author: John D. Hunter, Michael Droettboom - License: License agreement for matplotlib versions 1.3.0 and later ========================================================= 1. This LICENSE AGREEMENT is between the Matplotlib Development Team ("MDT"), and t… - Requires Python: \>=3.11 - Bug Tracker: - Documentation: - Donate: - Download: - Forum: - Homepage: - Source Code: ## SBOMs ### matplotlib-3.11.2-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, matplotlib/matplotlib-release, workflow wheels.yml). - [matplotlib-3.11.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7b5b4bfb-dd15-5c03-b50a-8a932d72bd68/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### matplotlib-3.11.2-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, matplotlib/matplotlib-release, workflow wheels.yml). - [matplotlib-3.11.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/980c5146-9c8f-5154-a282-4f9a9b3d911c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### matplotlib-3.11.2-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, matplotlib/matplotlib-release, workflow wheels.yml). - [matplotlib-3.11.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0ef902f6-6da9-55c3-bed2-1447107a47da/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### matplotlib-3.11.2-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, matplotlib/matplotlib-release, workflow wheels.yml). - [matplotlib-3.11.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/831aab3d-548e-5ff8-9225-4f611260e863/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### matplotlib-3.11.2-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, matplotlib/matplotlib-release, workflow wheels.yml). - [matplotlib-3.11.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9b4de26a-f240-51c4-81f7-370447f0f5e1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### matplotlib-3.11.2-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, matplotlib/matplotlib-release, workflow wheels.yml). - [matplotlib-3.11.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/674fb013-4613-55a6-a423-d3d92763556a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### matplotlib-3.11.2-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, matplotlib/matplotlib-release, workflow wheels.yml). - [matplotlib-3.11.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4af5abbe-0cea-5dd8-88e9-97887e9ec2fb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/matplotlib@3.11.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/matplotlib/3.11.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/matplotlib/3.11.2