# SBOM for mattress 0.4.3 > All your matrix representations belong here! The Python package mattress 0.4.3 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/mattress@0.4.3` - PyPI: https://pypi.org/project/mattress/0.4.3/ - Author: "Jayaram Kancherla, Aaron Lun" - License: MIT - Requires Python: \>=3.9 - Documentation: - Homepage: - Source: ## SBOMs ### mattress-0.4.3-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tatami-inc/mattress, workflow pypi-publish.yml). - [mattress-0.4.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5c47d226-af15-50e2-b5f8-faf38e7a241c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mattress-0.4.3-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tatami-inc/mattress, workflow pypi-publish.yml). - [mattress-0.4.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c0525c77-962d-51fe-b263-832f66bf6365/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mattress-0.4.3-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tatami-inc/mattress, workflow pypi-publish.yml). - [mattress-0.4.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6f1597be-4fc6-5710-bb8d-39491268d2ef/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mattress-0.4.3-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tatami-inc/mattress, workflow pypi-publish.yml). - [mattress-0.4.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4ff30395-8696-5ec5-8570-a3e32c19d4b0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mattress-0.4.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tatami-inc/mattress, workflow pypi-publish.yml). - [mattress-0.4.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6d34bef1-2d7b-5e8b-b73d-86cc3d57b5ba/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mattress-0.4.3-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tatami-inc/mattress, workflow pypi-publish.yml). - [mattress-0.4.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7b2944cd-a4e1-55dd-ac7d-2039d25b43f2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mattress-0.4.3-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tatami-inc/mattress, workflow pypi-publish.yml). - [mattress-0.4.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a5991f57-12de-5f2f-858f-a9ac1a0d8eeb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mattress-0.4.3-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, tatami-inc/mattress, workflow pypi-publish.yml). - [mattress-0.4.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/20155eae-d14e-52d0-b519-734f0d38a948/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/mattress@0.4.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/mattress/0.4.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/mattress/0.4.3