# SBOM for medpython 1.1.1

> Medial EarlySign Python

The Python package medpython 1.1.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/medpython@1.1.1`
- PyPI: https://pypi.org/project/medpython/1.1.1/
- Author: Alon Lanyado
- Requires Python: \>=3.8
- Changelog: <https://github.com/Medial-EarlySign/medpython/discussions/categories/announcements>
- Documentation: <https://medial-earlysign.github.io/MR_Wiki/>
- Homepage: <https://github.com/Medial-EarlySign/medpython>
- Repository: <https://github.com/Medial-EarlySign/medpython>

## SBOMs

### medpython-1.1.1-cp310-cp310-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, Medial-EarlySign/MR\_Scripts, workflow build\_py.yaml).

- [medpython-1.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ed50eaf4-81f5-5ffc-87df-037dc7da81eb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### medpython-1.1.1-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, Medial-EarlySign/MR\_Scripts, workflow build\_py.yaml).

- [medpython-1.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ed3de0de-a42e-5ecb-81b9-10711b598ac4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### medpython-1.1.1-cp312-cp312-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl

PEP 740 attestation verified (GitHub, Medial-EarlySign/MR\_Scripts, workflow build\_py\_arm.yaml).

- [medpython-1.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/25a6da8a-a121-5d88-bda5-c54ed0f50220/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### medpython-1.1.1-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, Medial-EarlySign/MR\_Scripts, workflow build\_py.yaml).

- [medpython-1.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9766a8ba-7bbd-56b2-9a12-62fca867eb56/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### medpython-1.1.1-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, Medial-EarlySign/MR\_Scripts, workflow build\_py.yaml).

- [medpython-1.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ba1c71fc-1e89-53be-a772-487eced27a99/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### medpython-1.1.1-cp314-cp314-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl

PEP 740 attestation verified (GitHub, Medial-EarlySign/MR\_Scripts, workflow build\_py.yaml).

- [medpython-1.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2893bb17-3188-5a54-a019-85f5936e6df7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/medpython@1.1.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/medpython/1.1.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/medpython/1.1.1