# SBOM for mgrs 1.7.0

> MGRS coordinate conversion for Python

The Python package mgrs 1.7.0 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/mgrs@1.7.0`
- PyPI: https://pypi.org/project/mgrs/1.7.0/
- Author: Howard Butler
- License: The MIT License (MIT) Copyright (c) 2016 Howard Butler \<howard@hobu.co\> Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation file…
- Requires Python: \>=3.11
- changelog: <https://github.com/hobuinc/mgrs/commits/main/>
- repository: <https://github.com/hobuinc/mgrs/>

## SBOMs

### mgrs-1.7.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/28f25697-f46b-53d8-8966-fdb2497d306f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2fcd1ec2-cfd7-5f42-af02-7a7879004bfc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dfd1e626-4b09-554b-93ff-c1f943fb8fc5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6dcb23b2-4d1d-552b-9301-3f67f76e32ef/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bdfe1079-b5c6-5d9c-98bc-4f0d8a9f4a72/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/da323cc2-66f1-51fb-bd62-2ef1181ce37e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1329eb2b-e3da-5ac1-ae20-9cfc2a6a22ab/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3610f980-7e55-5272-9787-aabc7f376457/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b61f7ba0-e729-514b-a5d3-f5c7801ebd2f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/80bc330e-ff21-5298-8ad6-af7b866c6858/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fe4759c9-dd0d-5ab2-a848-fc1f663aa822/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/856dcf12-3d89-5045-9eaa-e7f30bf76a45/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp315-cp315t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/19b18aa8-c63f-524e-86cb-a4a7a45a462c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### mgrs-1.7.0-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, hobuinc/mgrs, workflow deploy.yml).

- [mgrs-1.7.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/20eb848e-ceaf-5eac-85a1-3bc3e7e47266/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/mgrs@1.7.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/mgrs/1.7.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/mgrs/1.7.0